title: Technology safeguards needed as security rule audits loom.
abstract: The Department of Health and Human Services will conduct security rule audits that will involve on-site visits and include: Compliance-focused interviews with key organizational leaders. Scrutiny of physical operations controls, especially regarding storage, maintenance, and use of protected health information. Assessment of organizational policies and procedures to ensure compliance with privacy and security rules. Identification of regulatory compliance areas of concern.
authors.affiliation: Ropes & Gray LLP, Chicago, USA. deborah.gersh@ropesgray.com
authors.forename: Deborah
authors.initials: D
authors.lastname: Gersh
authors.forename: Laura G
authors.initials: LG
authors.lastname: Hoey
authors.forename: Timothy M
authors.initials: TM
authors.lastname: McCrystal
authors.forename: David C
authors.initials: DC
authors.lastname: Tolley
mesh_terms: D016494:Computer Security / Q000592:standards*; D020408:Health Insurance Portability and Accountability Act; D008330:Management Audit; D017751:Safety Management / Q000592:standards*; D014481:United States; D014483:United States Dept. of Health and Human Services