Global Managed Compliance Services Program

ecfirst.com's Global Managed Compliance Services Program is designed to address critical regulatory requirements. This program allows customers to outsource their regulatory activities which will lower costs and save time. The Global Managed Compliance Center is a highly flexible and scalable service. This program is based on our acclaimed Global Command Center Platform and is designed to assist healthcare organizations and business associates address compliance challenges in the following areas:

HIPAA Privacy Review Security Responsibility Risk Analysis Contingency Planning Policies and Procedures Security Awareness and Training Audit and Evaluation

HIPAA Managed Compliance Services - Service Offerings

HIPAA Academy, a division of ecfirst.com, is a leading brand in HIPAA Compliance Services, Training and Certification.

HIPAA Regulation	HIPAA Requirement	Service Offerings
HIPAA Privacy Rule 45 CFR Parts 160, 162, and 164	The Department of Health and Human Services (HHS) has issued the regulation, “Standards for Privacy of Individually Identifiable Health Information,” applicable to entities covered by HIPAA. The Office for Civil Rights (OCR) is the Departmental component responsible for implementing and enforcing the privacy regulation.	Review access controls for PHI access Review privacy policies and procedures Review processes for access to PHI Perform Segregation of Duty Review of current accesses across systems Recommend solutions to address privacy gaps
Assigned Security Responsibility 164.308(a)(2) )	Covered entities must identify the security official who is responsible for the development and implementation of the Security Rule’s required policies and procedures.	Additional capability as an Interim Security officer to oversee risk and compliance Inclusion of security responsibility as part of the job roles and responsibilities Inclusion of security requirements in third party contracts / agreements
Risk Analysis 164.308(a)(1)	Conduct an accurate and thorough assessment of the potential risks to and vulnerabilities of the confidentiality, integrity and availability of the entity’s electronic protected health information (EPHI).	Assess IT processes Classify data/assets (CIA) Assess threat likelihood on assets/services Impact Analysis on information assets Evaluate the adequacy in current levels of controls and safeguards Risk mapping and classification Analyze controls gaps Identify remediation priorities Prepare standardized reports
Contingency Plan 164.308(a)(7)	Covered entities must establish policies and procedures for responding to an emergency.	Assess Business Processes Conduct Business Impact Analysis (BIA) Analyze existing recovery plan and contingency measures Develop recovery strategies Develop contingency plan documents
Policies, Procedures and Documentation 164.316	Covered entities must implement reasonable and appropriate policies and procedures to comply with standards and implementation specifications of the HIPAA Security Rule.	Review policy and procedure implementation plan Review of the existing information security policies and map to HIPAA security requirements Develop additional policies to address policy gaps Help process owner in implementing the procedures to comply with HIPAA Security requirements Develop a document standard for policies and procedures
Policies, Procedures and Documentation 164.316	Covered entities must implement reasonable and appropriate policies and procedures to comply with standards and implementation specifications of the HIPAA security rule.	Policy, procedure implementation plan Help process owner in implementing the procedures to comply with HIPAA security requirements Develop a document standard for policy, procedure, standards and baselines
Security Awareness and Training 164.308(a)(5)	Covered entities must implement a security awareness and training program for all members of the workforce.	Periodic training and awareness programs on security policies for employees and contractors Identify role based training for operations and support staff to address compliance requirements Develop training content to address HIPAA Security requirements
Evaluation 164.308(a)(8)	Covered entities must perform periodic evaluations to determine the extent to which the security policies and procedures meet the Rule’s requirements.	Periodic review of information security policies and procedures Review changes to regulatory requirements and make necessary changes to policies Update standards, baselines, procedures to comply with policies Develop dashboard reporting to clearly establish state of HIPAA compliance Assess remediation actions recommended in risk analysis and actual actions taken by the organization to mitigate risk

Our service offerings are aligned with HIPAA and to other regulations to ensure complete compliance for healthcare organizations and business associates.

Value Added Services:

• Advisories on Security vulnerabilities and fixes
• Security Alerts and mailers
• Regular advisories on Security vulnerabilities
• Security Monitoring and Management Services
• Centralized Security Monitoring & Event Correlation
• Perimeter Security monitoring
• Patch / Release Management
• Centralized management for patch deployment activity
• Automated process for patch deployment
• Patch testing
• Patch Status reporting
• Security Incident Management
• Develop incident management framework
• Incident detection and classification
• Diagnosis and investigation
• Incident Reporting
• Log monitoring and event correlation
• Log analysis and event correlation
• Trend analysis, pattern recognition
• Storage and retention
• HIPAA Compliance Dashboards, trends and statistics
• Compliance reports and dashboard
• Statistical analysis

The Global Compliance Center

We provide world class infrastructure services through the acclaimed Global Infrastructure Command Center and security services through the Global Security Operations Center.

Our Managed Global Compliance Center is designed to assist healthcare organizations and business associates manage Security, Privacy and the Infrastructure to comply with the HIPAA regulation.

The Global Managed Compliance Center provides an end to end compliance service spectrum that can be tailored to meet your specific requirements.

Benefits of Managed Regulatory Compliance Services:

• Skilled resource pool with deep regulatory and domain knowledge to manage your sensitive information ensuring compliance with security and privacy requirements
• Our unique managed services framework ensure your budget allocation stays in line with your business goals and help you stay ahead in competitive environment
• Our focused approach towards providing 24/7 service using our “Global Compliance Center” assures closure of any security issues in a timely manner 
• We provide the industry-wide recognized HIPAA training to ensure you employees are aware of the regulations

HIPAA Managed Compliance Services:

Wipro Technologies has partnered with HIPAA Academy, a leading brand in HIPAA Compliance Services, Training and Certification services for Healthcare industry, enabling us to provide you a robust, comprehensive framework for managed HIPAA services.

Wipro – HIPAA Academy Partnership

Wipro Technologies, the Global IT Services Business of Wipro Ltd (NYSE:WIT) and ecfirst.com, home of the HIPAA Academy have established the Global Managed Compliance Center to provide a 360 degree platform for a complete start-to-finish HIPAA Compliance.

Wipro Technologies (Ticker Symbol:WIT) is a leading provider of integrated business, technology, IT infrastructure and process solutions on a global delivery platform.. Wipro is the World's first CMMi Level 5 certified software services company. The HIPAA Academy, a division of ecfirst.com, was recognized by Inc. 500 in 2004 as America’s 500 fastest growing privately held business. In the area of HIPAA compliance, the HIPAA Academy has earned the trust of over 130 hospitals in the USA.

About ecfirst.com

ecfirst.com, an Inc. 500 business, is a leader with rich hands-on experience delivering world-class security regulatory compliance solutions. The ecfirst.com Regulatory Compliance Practice delivers deep expertise with its full suite of services that include contingency planning/Business Impact Analysis (BIA), vulnerability assessment, as well as managed security and IT infrastructure solutions.

About HIPAA Academy

HIPAA Academy delivers compliance solutions across the United States every day. Our deep knowledge of the HIPAA and Sarbanes-Oxley regulations is substantiated with hands-on experience implementing technical solutions in the healthcare industry. The HIPAA Academy introduced the industry's first, and today's leading, credentials for HIPAA skills certification: Certified HIPAA Professional (CHP) and Certified HIPAA Security Specialist™ (CHSS™). For more information, please visit http://www.HIPAAacademy.net

For more information, please contact Lorna Waggoner, Director of Business Development at 1.877.899.9974 x17.