Case Study: Large Hospital achieves HIPAA compliance with Optiv

Hospital Secures Data and Achieves HIPAA Compliance

Large Hospital, a healthcare organization with nearly 3,000 employees, needed help reviewing its HIPAA controls and data handling practices around its Electronic Medical Records (EMR) system. To better understand how sensitive patient data moved through the hospital, the customer engaged Optiv for HIPAA compliance services and a data flow assessment.

Optiv gathered network diagrams and documentation, created a data flow diagram, and interviewed staff responsible for EMR information security to validate policies and processes against HIPAA requirements. As a result, the hospital gained full visibility into how patient data flows, identified security improvement areas, and achieved HIPAA compliance.