With audits and investigations on the rise, there is growing sense of foreboding among those who need to be HIPAA compliant. Many are scrambling to "button up" any loose ends before the Feds show up with a ticket book. But there is one thing you really must do if you have any chance to survive an audit or investigation.

Documentation is a major part of HIPAA Security Rule compliance. Aside from your policies and procedures, there are many actions, activities, reviews, logs, assessments and evaluations that must be documented.  Get this right and your chances of surviving an audit or investigation will be much higher.

I hear HIPAA Security Rule compliance often referred to with groans and even references to preferring bodily harm than having to deal with it. No doubt, being required to comply with any government regulation is a burden that brings a cost in time, energy and dollars.  That cost can be a hard sell to the business owners if they can't see a return (and if they think they can get away with non-compliance).  But when you step back and look at what is really required, there are some very positive benefits your business can realize if compliance is done properly.

When technology drives the process, you will end up hitting certain areas and overlooking others. Worse, you miss out on the spirit of what the Security Rule is all about.  Find out why and what to do about it.