Case History: HIPAA Compliance - Medical Agency | WCG

Wilson Consulting Group’s (WCG) task was to review, verify, and test the security controls (management, operational, and technical) of the Electronic Protected Health Information (EPHI) system and other related systems in this city. WCG also had to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) Security Remediation/Compliance Program.

WCG confirmed that the:

• Suitability of technical security controls, such as firewalls, strong authentication and intrusion detection systems.
• Audit processes to detect unauthorized actions by internal and external users, to capture evidence of successful and unsuccessful attempts of tampering, to perform forensics, and to implement incident response procedures.
• Known vulnerabilities (such as sample code that comes with software packages, buffer overflow-type weaknesses, etc.)
• Virus detection and protection mechanisms