2/24/2017

1

Internal Audit, Risk, Business & Technology Consulting

HIPAA COMPLIANCE THAT ADDRESSES THE RISKS OF TODAY AND WILL GROW WITH YOU IN THE FUTUREBen Burton, Consultant (First Class Solutions, Inc.)

Kevin Dunnahoo, Senior Manager (Protiviti)

Matt Jackson, Director (Protiviti)

WELCOME

2/24/2017

2

© 2017 Protiviti Inc. An Equal Opportunity Employer M/F/Disability/Veterans. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services. All registered trademarks are the property of their respective owners.

AGENDA

3

Introduction & Industry Buzz (Protiviti)

Seven Elements & HIPAA Compliance (First Class Solutions, Inc.)

Break (15 minutes)

Cybersecurity Considerations & Risk Analysis Processes (Protiviti)

Trending Risk Areas (Protiviti)

Closing Remarks

Q&A

INTRODUCTION & INDUSTRY BUZZ

2/24/2017

3

© 2017 Protiviti Inc. An Equal Opportunity Employer M/F/Disability/Veterans. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services. All registered trademarks are the property of their respective owners.

CERTAINTIES…

Death

Taxes

Breaches

5

GovernmentAudits

© 2017 Protiviti Inc. An Equal Opportunity Employer M/F/Disability/Veterans. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services. All registered trademarks are the property of their respective owners.

IN THE NEWS

6

2/24/2017

4

© 2017 Protiviti Inc. An Equal Opportunity Employer M/F/Disability/Veterans. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services. All registered trademarks are the property of their respective owners.

ENFORCEMENT IS HERE

Covered Entities and Business Associates

Address confirmation letters sent out from an @hhs.gov email account (beware of phishing)

Pre-audit questionnaires have been sent out verifying demographics of the organization and requesting a list of BAs

20,000+ BAs identified

10 business days to respond with the requested information, be ready!

On-site comprehensive audits start in 2017

7