HIPAA Facilities SECURITY

Facility Level Security

Each IT outsource facility is a secure establishment that requires multiple precautionary levels regarding employees versus outside personnel. Each person is issued an identification card that is inspected and logged by security officers prior to entry into the company. A second check is also confirmed per unit to permit access to the actual production area.

Equipment

All IT outsource - owned computer equipment resides in a secure facility restricted to authorized personnel only. Hardware, disk, cellular phones, cameras, or any formof storage devices are never brought in and out of the facility without written pre-authorization of IT outsource's HIPAA Compliancy officer.

Data Transfer Security

When authorized individuals access patient data on the IT Outsource platform, their computer connection is automatically encrypted and protected from "hackers" using a minimum of 128-bit encryption process. This ensures the protection of all sensitive information, making all IT Outsource's data completelu and totally inaccessible to any unauthorized personnel both physically and on the net.

TRAINING

HIPAA trainings

IT Outsource has taken HIPAA compliance to an entirely new level. Aside from facility HIPAA requirements, we mandate monthly HIPAA training for all our employees regardless of position. The training covers such areas as:
  • Right to Privacy
  • Right to Monitor, Audit, Read
  • Training and Authorization Required
  • User's Acknowledgment Required
  • Access
  • Dictation and Dictation Playback
  • Shipping of Dictation
  • Log-off Required
  • Electronic Transmission of Transcribed Data
  • Storage and Deletion of Dictation on Voice File
  • Authentication of Report
  • Release of Patient Data
  • Enforcement
  • User Understanding

*** A priority in the company's objectives is to ensure the most secure and private environment for the management of clinical healthcare information of its clients. For a complete overview of the company's HIPAA compliance policies and procedures, please email us at cypherscribeinc@cypherscribe.com