Five steps to protect your organization from HIPAA audits.

An audit begins with a notification letter requesting evidence of a covered entity’s HIPAA privacy and security compliance efforts. Thirty to 90 days following receipt of the requested information, KPMG will conduct an on-site visit. The on-site visit will include interviews with the entity’s leadership, examination of the physical space and operations, review of consistency of the entity’s practice with its stated policies and observation of the entity’s compliance with the HIPAA rules.