Jeff LangmaidFounder, The Evidence Based Chiropractor

You're Not Tracking All 50 Of These

4 Aug 2026 · 1 min

Watch on YouTube

0:48

In this instructional segment, the speaker outlines the compliance workflow required under HIPAA for healthcare practices. First, a security risk analysis is performed as mandated by HIPAA. Following that, the speaker describes a systematized monthly monitoring and auditing program built around a 50‑item checklist. The checklist items are distributed across the calendar year, and each month the practice and the compliance team hold a roughly one‑hour walkthrough with the provider to verify completion, document findings, and discuss any other practice‑specific issues. The speaker notes that the overall engagement typically consumes 2–3 hours per month per client: about one hour dedicated to the formal monitoring/audit session and the remaining time for follow‑up, additional support, and guiding the practice through the process.

Chapters

Once we hit that, then we do a security risk analysis, which is required by HIPAA. And then we move into the monthly monitoring and auditing, which is, uh, we've created that checklist of those over those 50 things that need to be done ahead earlier. We've, uh, systematized it to fall on certain months with checklist. And so every month we get together, it's about an hour of time out of the provider. Uh, and then we walk through and we check those things off the list. We document this, that, the other thing. And then we talk about any other things that are going on within the practice. And then we typically put in 2 to 3 hours a month with our clients. 1 hour for sure of monitoring and auditing. But there's just other things that go on with the practice, or maybe we're doing some follow-up, you know, with them, but we lead them through that process.