“Now is the time to ensure that documents are in order, especially if you have received a pre-screening questionnaire.”
- Cataloging your business associates in a spreadsheet that you will be able to quickly provide to OCR.
- Using the updated audit protocol to identify potential gaps in documentation, especially related to notice of privacy practices, right of access, risk analysis, risk management, and breach notification. For example, do you have six years documentation of the location of your designated record sets?
- Conduct a mock audit exercise to ensure that you can provide requested documentation within 10 business days and can respond to a draft audit report within 10 business days.
