Meaningful Use Audit HIPAA

[bradyg23]

A client has asked me to perform their Meaningful Use audit for HIPAA security. Although I've been involved in a Sarbanes Oxley audit before, I've never been the point person on an audit.

Does anyone have good resources on a Meaningful Use audit? Any experience conducting one?

[Tekko]

Originally Posted by bradyg23

A client has asked me to perform their Meaningful Use audit for HIPAA security. Although I've been involved in a Sarbanes Oxley audit before, I've never been the point person on an audit.

Does anyone have good resources on a Meaningful Use audit? Any experience conducting one?

I'm in the same boat as you, having had some SOX experience but very little HIPAA. I have heard its very tedious, how many users does the company have?

[bradyg23]

Only about 20 users. I feel like I could identify the weaknesses for them with no issues, but I don't know how involved I would need to be in their remediation steps. I could see that growing into 20 different projects. I guess I would just need to identify the scope of my work very clearly: I am working on their audit; work I would complete for the remediation would be a different project.