[ Friday, December 02, 2011 ]
Dom notes a recent survey by HCPro
(apparently it's not just Ponemon out there asking questions) which indicates that only 17% or healthcare organizations are prepared for an audit. OCR is starting its audit process with a total of 150 "covered entities" over the next 14 months, with 20 or so getting started in November (so far, I haven't heard any names mentioned). I have no idea how many "covered entities" there may be in the US, but 150 is a tiny, tiny fraction. So the odds of being a targeted entity at this point are slim. BUT, this is a good time to think about getting your organization into a position that you could at least manage an audit, even if you don't think you could completely pass it.
At the very least, don't make yourself "low hanging fruit."
Jeff [10:57 AM]
Blogger: HIPAA Blog - Edit your Template