Baker Tilly

Loading...

Subscribe to newsletters
About Us
Careers
Client Portals
Pay Invoice
Locations
Industries
Services
Professionals
Legal & Privacy
CCPA Privacy
Contact Us
Request a Proposal

© 2024-2026 Baker Tilly US, LLP / Baker Tilly Advisory Group, LP

Baker Tilly US, LLP and Baker Tilly Advisory Group, LP and its subsidiary entities provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms.

Baker Tilly Advisory Group, LP and Baker Tilly US, LLP are independent members of Baker Tilly International. Baker Tilly International Limited is an English company. Baker Tilly International provides no professional services to clients. Each member firm is a separate and independent legal entity and each describes itself as such. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP are not Baker Tilly International’s agent and do not have the authority to bind Baker Tilly International or act on Baker Tilly International’s behalf. None of Baker Tilly International, Baker Tilly Advisory Group, LP, Baker Tilly US, LLP, nor any of the other member firms of Baker Tilly International has any liability for each other’s acts or omissions. The name Baker Tilly and its associated logo is used under license from Baker Tilly International Limited.

HIPAA Compliance

HIPAA compliance not only helps your organization comply with legal requirements, but it could help you avoid hefty fines related to data breaches.

Insights

Article

Supercharge regulatory compliance: The benefit of integrating GRC tools

Article

How auditors use GRC tools and why your audit process needs both

Article

Protect health data: SOC 2, HITRUST, and HIPAA compliance intersect

Article

Why are SOC audits for healthcare so important?

 

View all related insights

The high value of health care data makes health care organizations and partnering external vendors significant targets for cyber-criminals.

Taking a proactive approach to HIPAA compliance not only helps keep your organization current with legal requirements but could also help prevent the hefty fines and damage control that accompany a breach. With more than 50 administrative, technical, and physical control requirements under HIPAA security rules to safeguard, verifying your security standing can be a complex process—with potential gaps often overlooked by internal teams that implement and administer controls.

With guidance from our professionals, you can complete risk assessments to align your controls with HIPAA security and privacy rules and protect the information of your patients and clients, while helping to reduce the risk of a data breach.

Solutions to safeguard current and future risks

Taking a comprehensive, forward-looking approach to HIPAA compliance, our professionals help position your cybersecurity processes and controls for long-term success, so you can identify compliance or risk gaps before a potential cyberattack.

Risk assessments can help a range of organizations including:

  • Hospitals, medical clinics, health plans, and other health care organizations
  • Software as a Service providers and other contractors serving the health care industry
  • Organizations storing employee health information

How the HIPAA Compliance Process Works

Developing a work plan for your organization, our professionals will help you:

  • Identify where protected health information (PHI) is acquired, transmitted, and stored within your systems
  • Review policies, procedures, and control implementations
  • Observe system settings and data protection mechanisms to secure electronic PHI
  • Conduct penetration testing to test and validate against HIPAA safeguards
  • Assess the design and effectiveness of controls and their alignment with the HIPAA safeguards

    • Following testing, you’ll receive a detailed report outlining all identified HIPAA security regulations and corresponding findings, as well as risk ratings with remediation recommendations to help you address and navigate potential vulnerabilities and gaps in compliance.

    Expansive Health Care and Cybersecurity Experience

    With dedicated Cybersecurity Services lines, our professionals have extensive knowledge of cyber-risk frameworks. Our collaborative approach takes the time to understand the specifics of your organization’s needs and strategically develop unique solutions contextualized among greater industry trends and activity.

    Deeply immersed within the healthcare industry, our professionals understand the nuanced operations of health care organizations and the demands they require of their vendors.

    While many organizations bring on contract specialists for HIPAA engagements, our professionals are dedicated to compliance services full-time and maintain collaborative relationships due to their extended experience together.

    Primary contact

    Troy Hawes profile photo

    Troy Hawes

    Managing Director

    +1 (206) 302 6529

    View profile