Procedures

Download Free Outsourcing and Audit Procedures Checklist

- Are customer connections (extranets) audited on a regular basis?
- Does a formal architecture exist for connecting customers (extranet) to your network?
- Does a formal policy exist to spell out when, why, and how extranet connections will be permitted?
- Is management approval required before bringing an extranet connection online?
- Is a formal security audit required before bringing an extranet connection online?

Summary of HIPAA Administrative Procedures explained below:

Security certification: Independent mechanisms for security compliance
Chain of trust: Agreements establishing equal security and integrity protection between trading partners
Contingency plan: Covers standard business continuity plans
Processing records mechanism: Describes how information is manipulated
Information access control: Describes access authorization, establishment, and modification