|
|
||
|
Corporation Name: |
NetCenergy |
|
|
Company description: |
At NetCenergy, we offer IT and security assessments and solutions for southern New England’s medical practices and clinics. For over 7 years, we have applied our deep industry knowledge to provide versatile, scalable, and affordable solutions designed exclusively to help medical practices with EHR implementations and on going support. Whether you’re a small practice with limited to no IT staff or a larger practice looking to compliment your current IT staff for a specific project, NetCenergy helps you craft the ideal solution including the appropriate assessment and recommendations addressing your technical needs, staying within budget, and conforming to the appropriate government regulations. |
|
|
Products & Services: |
Readiness Assessments |
|
|
Overview of Privacy and Security services: |
While it is not impossible for a medical practice to conduct their own Security Risk Assessment, it is not always feasible. Through experience, NetCenergy recognized the need many practices have for a security advocate, someone who understands HIPAA regulations and can work on the practice’s behalf to achieve part 15 of the required Meaningful Use Core Objectives and Measures. NetCenergy’s Security Advocate will conduct a comprehensive Security Risk Assessment, present their findings and help a practice remediate vulnerabilities. This collaboration with NetCenergy will mean a medical practice will have more time to focus on their patients while NetCenergy ensures compliance with MU part 15. |
|
|
Headquarters: |
Warwick, RI |
|
|
Number of years in business: |
10 Years in Business |
|
|
Number of years in Privacy and Security line of business (if different): |
7 |
|
|
Total number of employees: |
35 |
|
|
Number of employees in Privacy and Security business (if different): |
10 |
|
|
Website: |
||
|
Demonstration page: |
N/A |
|
|
Privacy & Security Services |
Y/N |
|
Which of the following Privacy & Security Services do you provide? |
|
|
a. Meaningful Use risk assessments |
Y |
|
b. HIPAA security assessments |
Y |
|
c. HIPAA privacy assessments |
In dev. |
|
d. State privacy and security assessments |
In dev. |
|
e. Risk remediation |
Y |
|
f. Risk management program development |
Y |
|
g. HIPAA security audits |
Y |
|
h. HIPAA privacy audits |
In dev. |
|
i. Privacy and security training |
Y |
|
j. Privacy and Security Program Development |
Y |
|
k. Security log auditing and monitoring |
Y |
|
Customer Support |
Y/N |
|
Please indicate the type(s) of customer support that you provide: |
|
|
a. Phone |
Y |
|
b. On-line support ticket system |
Y |
|
c. Chat support |
N |
|
d. Email |
Y |
|
e. User forum |
N |
|
f. Knowledge-based content |
Y |
|
g. On-site support |
Y |
|
h. Other: |
Y |
|
Meaningful Use Risk Assessments |
|
|
Please elaborate upon your Meaningful Use Risk Assessment including: |
NetCenergy provides a solution to meet the meaningful use security specification. For multi-site locations, each location will need a separate risk assessment. Separate locations will have differing staff experience and differing physical precautions which will create distinctly different risk profiles. Since NetCenergy is a certified HP health care Elite partner, it entitles us to use a software tool from ACR2 that complies with meaningful use number 15 requirements, which minimizes the amount of manual data collection and processing and also streamlines periodic progress reviews and reporting. |
|
a. How assessment is carried out (i.e. onsite visit)? |
Onsite visit |
|
b. Format of assessment report/executive overview? |
Electronic copy or hard copy |
|
c. How is assessment review conducted (i.e. phone or in-person review)? |
Phone or in person |
|
HIPAA Security Assessment |
|
|
Please elaborate upon your HIPAA Security Assessment including: |
NetCenergy provides a solution to meet the meaningful use security specification. Separate locations will have differing staff experience and differing physical precautions and risks. This solution also supports a document management and encryption for data protection. Since NetCenergy is a certified health care Elite partner, it entitle us to use a software tool that complies with HIPAA regulations and requirements, which minimizes the amount of manual data collection and analysis and also enables periodic progress reviews and reporting. |
|
a. How assessment is carried out (i.e. onsite visit)? |
Onsite visit |
|
b. Format of assessment report/executive overview? |
Electronic or hard copy |
|
c. How is assessment review conducted (i.e. phone or in-person review)? |
Phone or in-person |
|
Privacy & Security Training |
|
|
Please elaborate upon your Privacy & Security Training offerings including: |
In addition to offering administrative regulation training to ensure compliance, NetCenergy also offers specific programs based on the findings of an audit and assessment to reinforce the administrative requirements of the regulation |
|
a. How is training carried out (i.e. custom, onsite, we-based, video)? |
Custom, onsite, web based, video |
|
b. Examples of training topics? |
Compliance, Risk Assessment and mitigation, Disaster Recovery. |
|
Privacy & Security Program Development |
|
|
Please elaborate upon your Privacy & Security Program Development offerings including: |
NetCenergy has a health care experience resource who specializes in conducting audits as well as creating the appropriate security programs including the relevant policies and procedures to comply to the regulations administrative requirements with periodic progress reviews. |
|
a. Topic areas covered when assisting with the creation of policies, procedures and governance (i.e. physical security, data management, etc) |
Physical security, administrative security, data & technical management security. |
|
b. Policy and procedure templates provided? |
Included with Information Security and Privacy Program Package or individually priced. |