Incident and Breach Support Service and Audit Response Program

Please read below to learn more about our two complimentary subscription services. 

Incident and Breach Support Service (IBSS): Through the IBSS, we provide resources that allow users to determine whether a HIPAA privacy or security incident is a “breach of unsecured PHI” that must be reported to individuals, HHS, or the media. Our Incident Response Team meets with users to go over general questions users have about both the tools and the breach reporting and notification process. The IBSS does not constitute legal advice or a legal service, nor can Compliancy Group render advice as to whether a given incident is or constitutes a breach of unsecured PHI. 

To learn additional information about our IBSS, please read our Knowledge Base article here. 

Audit Response Program (ARP): The Audit Response Program is Compliancy Group’s service that assists clients who are being investigated by the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) for potential HIPAA violations. Through the ARP, Compliancy Group assists users with gathering documentation of their compliance efforts. Clients can provide this documentation to OCR in the event of an OCR investigation. The ARP does not constitute legal advice or a legal service and is a separate and distinct service from the IBSS.

Please note that Compliancy Group provides no guarantee that the documentation pulled from The Guard that you submit to OCR will result in a positive or favorable audit or investigation outcome. 

To learn additional information about our ARP, please read our Knowledge Base article here. 

If you are contacted by the HHS in regards to an audit or incident/potential breach, please contact support: 

Email: [email protected]