R&R Insurance Blog

Is your organization looking for a way to streamline the audit process for safety and compliance? Do you struggle to create and maintain audits, surveys or questionnaires?

R&R’s Risk Management Center offers an easy-to-use, web-based solution to help manage the audit process from start to finish.

The Audit Track^® provides your organization with the tools you need to proactively manage workplace safety, employee training, IIPP/APP safety program development, and OSHA compliance tracking, reporting and analysis. The tool also allows managers to oversee safety audit, inspection and compliance reporting needs, as well as confirmation that all tasks are assigned, completed and recorded – ensuring your workplace remains safe and compliant.

Completely customizable to your organization, the Audit Track^® allows you to:

• Create custom audits for your organization or department
• Deploy in the field on any major mobile device
• Assign to any employee and track tasks, activities and results
• Access summary and detailed reports based on your criteria
• Track, achieve and demonstrate regulatory compliance
• Target and resolve revealed issues before they become incidents
• Proactively manage your workplace
• Set field audits and surveys to your unique reoccurrence
• Make automated auditing an integral part of your safety strategy
• Keep all Safety Audits, Inspections, Self Assessments and other workplace checklists up-to-date

For more information on R&R’s Risk Management Center and the Audit Track^®, visit www.myknowledgebroker.com/RMC or email Safety@rrins.com.

The Office of Civil Rights (OCR) has proposed to ramp up their Phase II HIPAA audits at some point in 2015. Unlike the initial pilot Phase I audits, the second round will require compliance from the chosen health care account, as well as be expanded to include their “Business Associates.” Business Associates being subcontractors of health care organizations that have business agreements with the selected entity.

These audits will affect between 550-800 covered entities and their associated business partners chosen at random through the National Provider Identifier database.

What will the OCR be looking for?

• Risk analysis and risk management policies
• Content and timeliness of breach notifications
• Notice of privacy practices
• Individual access
• Training procedures
• Device and media controls
• Transmission security (Encryption)

The OCR will use the Phase II Audit findings to identify technical assistance that it should develop for covered entities and business associates. In circumstances where an audit reveals a serious compliance concern, OCR may initiate a compliance review of the audited organization that could lead to civil money penalties.

If you are a health care organization or have a Business Agreement with a health care organization, this may be a good time to review your Network Security Liability coverage with your insurance agent.

Contact our knowledge brokers for more information!