< Home < Risk Management & Internal Audit Services < SAS 70 < Security Compliance

Security Compliance Services


The Health Insurance Portability and Accountability Act (HIPAA) legislation imposes strict requirements related to the protection of personal health information handled by any organization. Medical practices, hospitals, long-term care facilities, pharmacies, as well as employers who sponsor health insurance plans are subject to HIPAA’s requirements.

Who is a candidate for HIPAA security compliance services?

  • Medical practices
  • Hospitals
  • Long-term care facilities
  • Pharmacies
  • Employers who sponsor health insurance plans

What is the process?

Our gap identification process reviews the following key elements related to security portion of HIPAA:

  • Administrative – process and documentation, policy and procedures, other security administration requirements
  • Technical – establishment of enforceable programs and systems
  • Physical – proper access procedures, locks and other physical barriers

After our review of your existing security procedures and systems, we can provide you with customized policies and procedures, including:

  • HIPAA Security Risk Analysis, tailored for your organization
  • Required overall security processes (administrative, technical, and physical)
  • Information security policies
  • Disaster recovery procedures
  • Customized security technology

Why should I engage Brown Smith Wallace?

We make A Measurable Difference™. Your HIPAA Security Risk Analysis, policies, and procedures will be based on answers to the gap analysis that we’ve helped you prepare – and are fully customized to your organization. This custom approach, combined with our highly experienced HIPAA team members, ensures the right compliance solution for you and your organization.

What else should I consider?