Industries > Healthcare > HIPAA Solutions

HIPAA will have varying impact on various organizations. The impact may vary from marginal changes in EDI translation software to entire revamp of IT systems and change in business process itself. Hence it is all the most important that every organization goes through proper BIA so as to strategize the compliance process in detail. BIA exercise will help in estimating the swiftness of action required. Knowledge Space International follows a 3-dimensional approach to HIPAA impact on your organization from the following three angles namely Process, Policies, and Technology. The Impact analysis that we use has the following phases: Inventory Analysis, Gap Analysis and Criticality analysis.

Inventory Analysis

By inventory analysis we mean stock of your current process, infrastructure in place both in terms of physical systems, Software and communication systems in place. The focus here is not only on the internal systems but also on the external systems of entities with which the organization has to interact during the course of business.

Gap Analysis

Once the Business impact analysis is completed our team of professions armed with the inventory report will conduct a Gap analysis which will identify the Gap's in your organizations HIPAA readiness. Qualitative measurement criteria will be developed as a tool to evaluate the current environment for each of the compliance items pursuant to identification of readiness gaps and potential vulnerabilities. The extent to which these gaps maybe filled through new processes or controls will be addressed in the risk analysis phase. Our team will work with members of your organization to perform this analysis.

The cross functional team will typically include representatives from the following departments:

Legal/ Compliance
Internal Audit
Information Technology
Training
Human resources
Facilities management
Risk Management

Criticality analysis

During this phase we will analyze, in detail, the Gaps previously identified in the system, along with their related business impacts and we will associate a criticality factor to each of the gaps identified. Criticality analysis allows us to rank the individual issues and to assign an appropriate weighting factor. The criticality analysis will be aligned with HIPAA requirements and will become a major factor influencing the scheduled corrections.