Compliance Documentation: Underrated Until You Need It, Then Worth More Than Gold!

By Mike Semel

I could hear the fear in her voice.

One of our clients, subject to the HIPAA rules, called to say she had just received a letter saying that her company was being randomly audited by the Office for Civil Rights (OCR) — the federal agency that enforces HIPAA — and she only had days to respond.

When we started with the client several months earlier, we used Network Detective from RapidFire Tools to scan their network and discovered they weren’t compliant. However, they assured me that they had corrected the issues.

We didn’t want to send the old reports, so we ran another set of scans to have proof they had addressed the issues.

But they hadn’t.