From the security and technology experts you trust comes an exclusive tool to aid in the automation of creating an audit ready environment. Navigate the treacherous water of HIPAA compliance with the OCR Audit Readiness (OAR) Assessment, powered by Symantec.

1. Introducing the OCR Audit Readiness
Assessment
From the security and technology experts you trust comes an exclusive tool to aid in the
automation of creating an audit ready environment. Navigate the treacherous water of
HIPAA compliance with the OCR Audit Readiness (OAR) Assessment, powered by Symantec.
A ONE-TWO PUNCH: Powered by Symantec’s Control Compliance Suite™ technology and
Symantec Engineers knowledge of HealthCare, we passively audit your systems and compile
relevant data. Then, we work with you to interpret the results to provide insight into the security
posture of your systems.
Operating System Hardening: The OAR program will define a hardening standard for a few
operating systems for demonstration. Once targeted systems are audited to these standards relevant
reports and dashboards will be created. These reports and dashboards are used to provide information
to auditors and other stakeholders for compliance efforts around the globe.
Overall HIPAA Compliance program: Operating System hardening is only one facet of a
compliance program. During the assessment evaluation of other facets of the program will be reviewed.
HOW IT WORKS.
Built on non-intrusive architecture, Healthcare OAR Assessment is performed in three steps:
Targeted audit of system settings Definition of proper standards Evaluate other facets of program
• Import list of systems to audit
• Create logical groups for systems
• Assign business owners
• Assign Confidentiality, Integrity,
and Availability values to the
assets
• Review Operating Systems in
place
• Run out-of-box standards
against test systems
• Adjust standards to
applicability to environment
• Company policy management
• Business Associate management
• Security Awareness Programming
• Procedural attestation requirements
WHAT TO EXPECT
Frompreparation andimplementationtoresult analysis and remediationplanning, wecanguideyouthroughyour
HealthCare OAR Risk Assessment every step of the way.
BUSINESS DAY 1 BUSINESS DAY 3 BUSINESS DAY 7
ORDER RELEASED Kick-off Configuration 1 HR
Once the services contract is signed, a A Healthcare Engineer will discuss Your Healthcare Engineer will come onsite
Solution Architect gathers your technical requirements and expectations with to install the risk assessment system and
information,schedules kick-off andclose-out your team. configure use case assessments for review.
meetings, and releases the order.
BUSINESS DAY 8-14 BUSINESS DAY 15 BUSINESS DAY16
PASSIVE MONITORING IN PROGRESS CLOSE-OUT 1 HR Shutdown Assessment system
There’s nothing required of you during Your Healthcareengineerandyour We cover the return shipping cost if
this time.The OARassessmentwill account manager meet with you to discuss applicable.
run automatically, but you can log in your results, outline steps for moving
while deployed. forward.