How automated access verification can help organizations demonstrate HIPAA compliance: A case study.
Linda L. Hill · PubMed · 2006
This case study of Sharp HealthCare takes an in depth look at how the organization has embedded security policies into its business process and automated workflow to ensure users are granted only the IT access that is necessary for them to perform their jobs and to ensure patient privacy Some of the most pressing audit and compliance concerns in healthcare organizations today revolve around the need to constantly review and give an account for users' IT access. The need for this at Sharp is exacerbated because of the high rate of change within the organization and the large percentage of non-employee staff such as traveling nurses moving throughout hospital departments on their rotations. By implementing a software solution to verify the accuracy of user access rights or automatically initiate appropriate corrective actions, Sharp is now able to extend the responsibility and accountability for compliance to the most appropriate resources.