Security Q&A: Audit logs, photographs, and video conferencing
Strategies for Health Care Compliance, April 1, 2015
This is an excerpt from a member only article. To read the article in its entirety, please login or subscribe to Strategies for Health Care Compliance.
Q: As part of the audit controls policy at my organization, we hired an external security vendor to collect and review logs from several critical servers. The vendor creates tickets for our IT staff when a potential incident is discovered during the daily log review. This supplements our own activity reviews of internally generated reports, and the vendor then uses them for its own review. Our internal staff never sees the reports the vendor uses for its review. Do the reports the vendor uses fall under the HIPAA requirement for retaining logs for six years? Should we compel the vendor to retain these reports?
This is an excerpt from a member only article. To read the article in its entirety, please login or subscribe to Strategies for Health Care Compliance.
Related Products
-
HIPAA Privacy and Security: Coders, Billers, and the HIM Staff
This course explains the HIPAA privacy and security rules that are relevant to coders, billers, and the HIM staff. It also...
-
HIPAA Privacy and Security for Nurses and Clinical Staff
This course explains the HIPAA privacy and security rules that are relevant to nurses and other clinical staff. It also...
-
HIPAA Privacy and Security: Registration and Front Office Staff
This course explains the HIPAA privacy and security rules as applicable and relevant to the registration and front office...
-
HIPAA Privacy and Security: Nutrition, Environmental Services, & Volunteer Staff
This course explains the HIPAA privacy and security rules as applicable and relevant to nutrition, environmental services...
-
HIPAA Privacy and Security: Business Associates
Most Popular
- Articles
-
- Don't forget the three checks in medication administration
- Note similarities and differences between HCPCS, CPT® codes
- What does case-mix index mean to you?
- Practice the six rights of medication administration
- Q&A: Primary, principal, and secondary diagnoses
- Complications from immobility by body system
- Prevent dehydration with nursing interventions
- Nursing responsibilities for managing pain
- Neurological checks for head injuries
- Pneumonia with a negative chest x-ray: Clinical diagnoses, physician documentation, and coding guidelines
- E-mailed
-
- The pros and cons of bar coding
- Prequalify patients for hyperbaric oxygen therapy to ensure accurate reimbursement
- Performing a SWOT analysis
- Patient testimonials lead to HIPAA breach
- Note from the instructor: Update to the CMS Post-Acute Transfer Policy Qualifying DRGs
- Note from the Instructor: Provider-Based vs. Freestanding Locations: Financials Flip-flop with New Packaging
- Insider’s scoop | Verbal orders
- Coding Corner: Tips for reporting bronchoscopy procedures
- Clear up confusion surrounding medical necessity
- Bridge the communication gap with physicians with these tips
- Searched
