Short answer: Practices should evaluate access controls, authentication, encryption, logging, backups, incident procedures, vendor oversight and the handling of electronic protected health information.
Start with access and accountability
Use unique accounts, role-based access, strong authentication and prompt removal of access that is no longer needed. Review privileged access and audit logs.
Evaluate vendors and data movement
Document where data is stored, transmitted and backed up, which subcontractors are involved, and how incidents and availability failures are handled. Appropriate agreements and risk analysis require qualified compliance guidance.
Treat security as an operating process
Training, patching, device controls, contingency plans and periodic review matter after implementation. Use current HHS guidance and professional legal or security advice for obligations specific to the organization.
Continue your medical billing research
Use the medical billing Buyer’s Guide, compare medical billing costs, or review outsourced billing services. When your scope is ready, check medical billing prices.
