PricewaterhouseCoopers audits and recommends security controls for implementation based on the HIPAA framework.

Visionary RCM Infotech (India) Private Limited (VRCM) is an ambitious services organization in the business of health care services. As part of setting up the operations, VRCM has initiated required security controls in accordance with the Health Insurance Portability and Accountability Act (HIPAA). In this regard, VRCM requested the assistance of PWC to recommend and assess the security controls required per HIPAA guidelines. While performing the review, we have covered the security controls requirements for the following safeguards, namely, administrative, technical and physical. PWC performed a detailed review of the business and IT practices at VRCM to understand the controls that were already in place. Based on the understanding, PWC mapped the security controls requirement per the HIPAA framework and provided recommendations to VRCM. Based on our report, and based on the implementation of the various controls at VRCM, we performed a final review of the security controls at VRCM.

In our report, a final review of the HIPAA security controls was performed. During our review we identified that VRCM has developed various controls required under the HIPAA security framework. Based on our review of practices and facilities, we found VRCM to be HIPAA compliant.