Security & Compliance
SOC 2 Certification
SOC, which stands for System and Organizational Controls, is a framework developed by the American Institute of Certified Public Accountants for the purpose of providing regular, independent attestation of the controls that a company has implemented to mitigate information-related risk. Passing the SOC audit means a company’s data management policies, procedures, and systems have been independently audited and approved. A client engaging AdminisTEP can have full confidence that its information is safe.
Compliance Committee
AdminsTEP’s Compliance Committee has general responsibility for overseeing implementation of compliance, ethics, and security programs, policies, and procedures that are designed to mitigate compliance and regulatory risks.
Security Safeguards
AdminsTEP is an industry leader in HIPAA compliance and security. All access controls and security are monitored by a dedicated security officer whose primary responsibility is HIPAA security compliance and infrastructure security. AdminsTEP is committed to ensuring that its products and services meet or exceed legal obligations with respect to the use, disclosure, storage and destruction of Protected Health Information (“PHI”) as governed by HIPAA (Health Insurance Portability and Accountability Act).
Business Continuity
AdminsTEP employs an event management system that measures the health and performance thresholds of all critical variables in the AdminisTEP environment. This provides a proactive approach whereby indicators are measured on an interval basis for a real-time, non-intrusive health check, which allows AdminisTEP to identify a problem before it becomes a problem so the proper avoidance action can be scheduled. The following outlines the Business Continuity Tools:
- Event Management
- Performance Management
- Threshold Management
- Outage Management
- Security Management
- Change Control Management
- Ticket Tracker
- Policy & Procedures
AdminsTEP has in place state of the art co-location facilities that provide the infrastructure for application hosting, data warehouse hosting, and e-business applications hosting. Our co-location facilities sits on the backbone of all major carriers and is powered by redundant power sources and generators, off-site storage, online SAN storage, and that employs bio-metrics security for access.
Regulatory Compliance
Using AdminisTEP’s SaaS model, you can ensure compliance as regulations change. From compliance with transaction standards to meeting regulatory requirements, AdminisTEP helps you avoid hassles and potential financial penalties. AdminisTEP’s capabilities include:
- Conversion of non-standard formats (XML, flat file, etc.) into standard X12 formats
- Division of Financial Responsibility (DOFR) — electronic storage and retrieval (California)
- Electronic management and medical records and correspondence to comply with regulatory deadlines
- Transaction translation for 4010 to 5010 and payer companion guides
- Electronic management of appeals, grievances, and responses to comply with regulatory deadlines
- HIPAA transaction/code sets and security infrastructure
- Fraud detection business rules