SlideShare una empresa de Scribd logo
1 de 21
HIPAA –HITECH e-Prescribing & Risk Analysis Valdez Ladd – CISSP, CISA, MBA, MS ISM, MAIA, ISO TC 215 WG 4
HIPAA –HITECH e-Prescribing & Risk Analysis
HIPAA –HITECH Medical Security ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
HIPAA –HITECH Breach Example ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
HIPAA –HITECH Breach Example ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
HIPAA –HITECH Breach Example ,[object Object],[object Object],[object Object]
HIPAA – HITECH e-Prescribing & Risk Analysis The Center for Improving Medication Management www.thecimm.org
HIPAA – HITECH e-Prescribing & Risk Analysis The Center for Improving Medication Management www.thecimm.org
Delaware E-Prescribing  Process Flow 42nd ISM Annual Conference  September 1, 2009 Physician   Software vendors   Pharmacy Network Surescripts SIG   Master Beneficiary and Formulary Database   Surescripts PRN   Medicaid   Other Pharmacy  Benefit Manager   Other Payers   Mail Order Pharmacy   Retail Pharmacy Pharmacy Network Payer Network Institutional Pharmacy
Computerized Provider (Physician) Order Entry (CPOE) Prescribing ,[object Object],[object Object],[object Object],[object Object],[object Object]
HIPAA – HITECH e-Prescribing & Risk Analysis ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
HIPAA – HITECH e-Prescribing & Risk Analysis ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Use of an E-Prescribing Application Certified for EPCS -  Certified to manage   ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Use of an E-Prescribing Application Certified for EPCS -  ID Proofing   ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Use of an E-Prescribing Application Certified for EPCS –  Two-Factor ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Use of an E-Prescribing Application Certified for EPCS –  Two-Factor ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
HIPAA – HITECH e-Prescribing & Risk Management ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],The Center for Improving Medication Management  www.thecimm.org
HIPAA – HITECH e-Prescribing & Risk Management ,[object Object],[object Object],[object Object],The Center for Improving Medication Management  www.thecimm.org
e-Prescribing & Risk Analysis ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
e-Prescribing & Risk Analysis – Additional Resources ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Questions?! ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Más contenido relacionado

La actualidad más candente

Emr powerpoint for IPM
Emr powerpoint for IPMEmr powerpoint for IPM
Emr powerpoint for IPM
Anna Tonnu
 

La actualidad más candente (20)

Scanning, Abstracting, & Adding Medical Records to an EHR
Scanning, Abstracting, & Adding Medical Records to an EHRScanning, Abstracting, & Adding Medical Records to an EHR
Scanning, Abstracting, & Adding Medical Records to an EHR
 
Electronic medical record for patients
Electronic medical record for patientsElectronic medical record for patients
Electronic medical record for patients
 
Electronic health records
Electronic health recordsElectronic health records
Electronic health records
 
Spectra e rx-br-A qualified system to prescribe electronically
Spectra e rx-br-A qualified system to prescribe electronicallySpectra e rx-br-A qualified system to prescribe electronically
Spectra e rx-br-A qualified system to prescribe electronically
 
Health record
Health recordHealth record
Health record
 
Ehr system implementation and ongoing maintenance
Ehr system implementation and ongoing maintenanceEhr system implementation and ongoing maintenance
Ehr system implementation and ongoing maintenance
 
What Are Electronic Health Records (EHRs)?
What Are Electronic Health Records (EHRs)?What Are Electronic Health Records (EHRs)?
What Are Electronic Health Records (EHRs)?
 
Electronic Medical Records (EMR) / Electronic Health Records (EHR) Replacemen...
Electronic Medical Records (EMR) / Electronic Health Records (EHR) Replacemen...Electronic Medical Records (EMR) / Electronic Health Records (EHR) Replacemen...
Electronic Medical Records (EMR) / Electronic Health Records (EHR) Replacemen...
 
EHR Implementation Plan Presentation
EHR Implementation Plan PresentationEHR Implementation Plan Presentation
EHR Implementation Plan Presentation
 
implementation
implementationimplementation
implementation
 
Making Sense of Health Information Systems
Making Sense of Health Information SystemsMaking Sense of Health Information Systems
Making Sense of Health Information Systems
 
Electronic Health Records: Implications for IMO State's Healthcare System
Electronic Health Records: Implications for IMO State's Healthcare SystemElectronic Health Records: Implications for IMO State's Healthcare System
Electronic Health Records: Implications for IMO State's Healthcare System
 
Electronic Health Record
Electronic Health RecordElectronic Health Record
Electronic Health Record
 
Prior Authorizations for Medications - an Overview
Prior Authorizations for Medications - an OverviewPrior Authorizations for Medications - an Overview
Prior Authorizations for Medications - an Overview
 
Electronic medical record for Doctors
Electronic medical record for DoctorsElectronic medical record for Doctors
Electronic medical record for Doctors
 
Introduction to EMR
Introduction to EMRIntroduction to EMR
Introduction to EMR
 
Emr powerpoint for IPM
Emr powerpoint for IPMEmr powerpoint for IPM
Emr powerpoint for IPM
 
Ehr As We See It
Ehr As We See ItEhr As We See It
Ehr As We See It
 
ePrescribe Controlled Substances With Ease
ePrescribe Controlled Substances With EaseePrescribe Controlled Substances With Ease
ePrescribe Controlled Substances With Ease
 
Electronic medical record
Electronic medical recordElectronic medical record
Electronic medical record
 

Similar a HIPAA HITECH E-Prescribing / E-Prescription

System Request FormDateProject Name Centralizing Medic.docx
System Request FormDateProject Name Centralizing Medic.docxSystem Request FormDateProject Name Centralizing Medic.docx
System Request FormDateProject Name Centralizing Medic.docx
mattinsonjanel
 
12 Introduction to Health Information Privacy and Security .docx
12 Introduction to Health Information Privacy and Security .docx12 Introduction to Health Information Privacy and Security .docx
12 Introduction to Health Information Privacy and Security .docx
moggdede
 
Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207
Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207
Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207
Erik Ginalick
 

Similar a HIPAA HITECH E-Prescribing / E-Prescription (20)

Get Best Credentialing Software | Clinic Spectrum.pdf
Get Best Credentialing Software | Clinic Spectrum.pdfGet Best Credentialing Software | Clinic Spectrum.pdf
Get Best Credentialing Software | Clinic Spectrum.pdf
 
Clinic Spectrum - Best Credentialing Software Provider
Clinic Spectrum - Best Credentialing Software Provider Clinic Spectrum - Best Credentialing Software Provider
Clinic Spectrum - Best Credentialing Software Provider
 
How Big Data Analysis Can Protect You From Fraud
How Big Data Analysis Can Protect You From FraudHow Big Data Analysis Can Protect You From Fraud
How Big Data Analysis Can Protect You From Fraud
 
Risk management in Healthcare on Cloud
Risk management in Healthcare on CloudRisk management in Healthcare on Cloud
Risk management in Healthcare on Cloud
 
PYA Highlights Next Steps of Meaningful Use
PYA Highlights Next Steps of Meaningful UsePYA Highlights Next Steps of Meaningful Use
PYA Highlights Next Steps of Meaningful Use
 
Compliance Today
Compliance TodayCompliance Today
Compliance Today
 
Web only rx16 len tues_1115_group
Web only rx16 len tues_1115_groupWeb only rx16 len tues_1115_group
Web only rx16 len tues_1115_group
 
Jamila Fraud & Abuse
Jamila Fraud & AbuseJamila Fraud & Abuse
Jamila Fraud & Abuse
 
The Health Insurance Portability and Accountability Act 
The Health Insurance Portability and Accountability Act The Health Insurance Portability and Accountability Act 
The Health Insurance Portability and Accountability Act 
 
Admit scan powerpoint slides
Admit scan powerpoint slidesAdmit scan powerpoint slides
Admit scan powerpoint slides
 
EHR & Healthcare
EHR & HealthcareEHR & Healthcare
EHR & Healthcare
 
Revenue Cycle Management
Revenue Cycle ManagementRevenue Cycle Management
Revenue Cycle Management
 
System Request FormDateProject Name Centralizing Medic.docx
System Request FormDateProject Name Centralizing Medic.docxSystem Request FormDateProject Name Centralizing Medic.docx
System Request FormDateProject Name Centralizing Medic.docx
 
Creating a Compliance Culture
Creating a Compliance CultureCreating a Compliance Culture
Creating a Compliance Culture
 
12 Introduction to Health Information Privacy and Security .docx
12 Introduction to Health Information Privacy and Security .docx12 Introduction to Health Information Privacy and Security .docx
12 Introduction to Health Information Privacy and Security .docx
 
Clinical research management slide
Clinical research management slideClinical research management slide
Clinical research management slide
 
Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207
Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207
Electronic Health Records Protecting Assets With A Solid Security Plan Wp101207
 
Fighting FWA in the Payer Industry Using Big Data
Fighting FWA in the Payer Industry Using Big DataFighting FWA in the Payer Industry Using Big Data
Fighting FWA in the Payer Industry Using Big Data
 
How Best Are Medical Practices Prepared to Address HIPAA Breaches?
How Best Are Medical Practices Prepared to Address HIPAA Breaches? How Best Are Medical Practices Prepared to Address HIPAA Breaches?
How Best Are Medical Practices Prepared to Address HIPAA Breaches?
 
Patient portals and meaningful use
Patient portals and meaningful usePatient portals and meaningful use
Patient portals and meaningful use
 

Más de Valdez Ladd MBA, CISSP, CISA,

Más de Valdez Ladd MBA, CISSP, CISA, (7)

Software data privacy threat analysis metric using no trust privacy risk metric
 Software data privacy threat analysis metric using no trust privacy risk metric Software data privacy threat analysis metric using no trust privacy risk metric
Software data privacy threat analysis metric using no trust privacy risk metric
 
The FDA - Mobile, and Fixed Medical Devices Cybersecurity Guidance
The FDA - Mobile, and Fixed Medical Devices Cybersecurity GuidanceThe FDA - Mobile, and Fixed Medical Devices Cybersecurity Guidance
The FDA - Mobile, and Fixed Medical Devices Cybersecurity Guidance
 
Cloud Breach - Forensics Audit Planning
Cloud Breach - Forensics Audit PlanningCloud Breach - Forensics Audit Planning
Cloud Breach - Forensics Audit Planning
 
The FDA and BYOD, Mobile and Fixed Medical Device Cybersecurity
The FDA and BYOD, Mobile and Fixed Medical Device CybersecurityThe FDA and BYOD, Mobile and Fixed Medical Device Cybersecurity
The FDA and BYOD, Mobile and Fixed Medical Device Cybersecurity
 
FedRAMP - Federal Agencies & Cloud Service Providers meet FISMA 2.0
FedRAMP - Federal Agencies & Cloud Service Providers meet FISMA 2.0FedRAMP - Federal Agencies & Cloud Service Providers meet FISMA 2.0
FedRAMP - Federal Agencies & Cloud Service Providers meet FISMA 2.0
 
Risk Management of Medical Devices Connected To IT Networks
Risk Management of Medical Devices Connected To IT NetworksRisk Management of Medical Devices Connected To IT Networks
Risk Management of Medical Devices Connected To IT Networks
 
Cloud Security Alliance's GRC Stack Overview
Cloud Security Alliance's GRC Stack OverviewCloud Security Alliance's GRC Stack Overview
Cloud Security Alliance's GRC Stack Overview
 

Último

Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...
Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...
Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...
chetankumar9855
 
Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...
Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...
Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...
adilkhan87451
 

Último (20)

Call Girls in Delhi Triveni Complex Escort Service(🔝))/WhatsApp 97111⇛47426
Call Girls in Delhi Triveni Complex Escort Service(🔝))/WhatsApp 97111⇛47426Call Girls in Delhi Triveni Complex Escort Service(🔝))/WhatsApp 97111⇛47426
Call Girls in Delhi Triveni Complex Escort Service(🔝))/WhatsApp 97111⇛47426
 
Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...
Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...
Call Girl In Pune 👉 Just CALL ME: 9352988975 💋 Call Out Call Both With High p...
 
9630942363 Genuine Call Girls In Ahmedabad Gujarat Call Girls Service
9630942363 Genuine Call Girls In Ahmedabad Gujarat Call Girls Service9630942363 Genuine Call Girls In Ahmedabad Gujarat Call Girls Service
9630942363 Genuine Call Girls In Ahmedabad Gujarat Call Girls Service
 
Call Girls Raipur Just Call 9630942363 Top Class Call Girl Service Available
Call Girls Raipur Just Call 9630942363 Top Class Call Girl Service AvailableCall Girls Raipur Just Call 9630942363 Top Class Call Girl Service Available
Call Girls Raipur Just Call 9630942363 Top Class Call Girl Service Available
 
8980367676 Call Girls In Ahmedabad Escort Service Available 24×7 In Ahmedabad
8980367676 Call Girls In Ahmedabad Escort Service Available 24×7 In Ahmedabad8980367676 Call Girls In Ahmedabad Escort Service Available 24×7 In Ahmedabad
8980367676 Call Girls In Ahmedabad Escort Service Available 24×7 In Ahmedabad
 
Models Call Girls In Hyderabad 9630942363 Hyderabad Call Girl & Hyderabad Esc...
Models Call Girls In Hyderabad 9630942363 Hyderabad Call Girl & Hyderabad Esc...Models Call Girls In Hyderabad 9630942363 Hyderabad Call Girl & Hyderabad Esc...
Models Call Girls In Hyderabad 9630942363 Hyderabad Call Girl & Hyderabad Esc...
 
Call Girls Rishikesh Just Call 9667172968 Top Class Call Girl Service Available
Call Girls Rishikesh Just Call 9667172968 Top Class Call Girl Service AvailableCall Girls Rishikesh Just Call 9667172968 Top Class Call Girl Service Available
Call Girls Rishikesh Just Call 9667172968 Top Class Call Girl Service Available
 
Call Girls Hosur Just Call 9630942363 Top Class Call Girl Service Available
Call Girls Hosur Just Call 9630942363 Top Class Call Girl Service AvailableCall Girls Hosur Just Call 9630942363 Top Class Call Girl Service Available
Call Girls Hosur Just Call 9630942363 Top Class Call Girl Service Available
 
Call Girls Ahmedabad Just Call 9630942363 Top Class Call Girl Service Available
Call Girls Ahmedabad Just Call 9630942363 Top Class Call Girl Service AvailableCall Girls Ahmedabad Just Call 9630942363 Top Class Call Girl Service Available
Call Girls Ahmedabad Just Call 9630942363 Top Class Call Girl Service Available
 
Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...
Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...
Russian Call Girls Lucknow Just Call 👉👉7877925207 Top Class Call Girl Service...
 
Call Girls Service Jaipur {9521753030} ❤️VVIP RIDDHI Call Girl in Jaipur Raja...
Call Girls Service Jaipur {9521753030} ❤️VVIP RIDDHI Call Girl in Jaipur Raja...Call Girls Service Jaipur {9521753030} ❤️VVIP RIDDHI Call Girl in Jaipur Raja...
Call Girls Service Jaipur {9521753030} ❤️VVIP RIDDHI Call Girl in Jaipur Raja...
 
Most Beautiful Call Girl in Bangalore Contact on Whatsapp
Most Beautiful Call Girl in Bangalore Contact on WhatsappMost Beautiful Call Girl in Bangalore Contact on Whatsapp
Most Beautiful Call Girl in Bangalore Contact on Whatsapp
 
Top Quality Call Girl Service Kalyanpur 6378878445 Available Call Girls Any Time
Top Quality Call Girl Service Kalyanpur 6378878445 Available Call Girls Any TimeTop Quality Call Girl Service Kalyanpur 6378878445 Available Call Girls Any Time
Top Quality Call Girl Service Kalyanpur 6378878445 Available Call Girls Any Time
 
Manyata Tech Park ( Call Girls ) Bangalore ✔ 6297143586 ✔ Hot Model With Sexy...
Manyata Tech Park ( Call Girls ) Bangalore ✔ 6297143586 ✔ Hot Model With Sexy...Manyata Tech Park ( Call Girls ) Bangalore ✔ 6297143586 ✔ Hot Model With Sexy...
Manyata Tech Park ( Call Girls ) Bangalore ✔ 6297143586 ✔ Hot Model With Sexy...
 
Trichy Call Girls Book Now 9630942363 Top Class Trichy Escort Service Available
Trichy Call Girls Book Now 9630942363 Top Class Trichy Escort Service AvailableTrichy Call Girls Book Now 9630942363 Top Class Trichy Escort Service Available
Trichy Call Girls Book Now 9630942363 Top Class Trichy Escort Service Available
 
Best Rate (Guwahati ) Call Girls Guwahati ⟟ 8617370543 ⟟ High Class Call Girl...
Best Rate (Guwahati ) Call Girls Guwahati ⟟ 8617370543 ⟟ High Class Call Girl...Best Rate (Guwahati ) Call Girls Guwahati ⟟ 8617370543 ⟟ High Class Call Girl...
Best Rate (Guwahati ) Call Girls Guwahati ⟟ 8617370543 ⟟ High Class Call Girl...
 
Premium Call Girls In Jaipur {8445551418} ❤️VVIP SEEMA Call Girl in Jaipur Ra...
Premium Call Girls In Jaipur {8445551418} ❤️VVIP SEEMA Call Girl in Jaipur Ra...Premium Call Girls In Jaipur {8445551418} ❤️VVIP SEEMA Call Girl in Jaipur Ra...
Premium Call Girls In Jaipur {8445551418} ❤️VVIP SEEMA Call Girl in Jaipur Ra...
 
💕SONAM KUMAR💕Premium Call Girls Jaipur ↘️9257276172 ↙️One Night Stand With Lo...
💕SONAM KUMAR💕Premium Call Girls Jaipur ↘️9257276172 ↙️One Night Stand With Lo...💕SONAM KUMAR💕Premium Call Girls Jaipur ↘️9257276172 ↙️One Night Stand With Lo...
💕SONAM KUMAR💕Premium Call Girls Jaipur ↘️9257276172 ↙️One Night Stand With Lo...
 
Call Girls Hyderabad Just Call 8250077686 Top Class Call Girl Service Available
Call Girls Hyderabad Just Call 8250077686 Top Class Call Girl Service AvailableCall Girls Hyderabad Just Call 8250077686 Top Class Call Girl Service Available
Call Girls Hyderabad Just Call 8250077686 Top Class Call Girl Service Available
 
Model Call Girls In Chennai WhatsApp Booking 7427069034 call girl service 24 ...
Model Call Girls In Chennai WhatsApp Booking 7427069034 call girl service 24 ...Model Call Girls In Chennai WhatsApp Booking 7427069034 call girl service 24 ...
Model Call Girls In Chennai WhatsApp Booking 7427069034 call girl service 24 ...
 

HIPAA HITECH E-Prescribing / E-Prescription

  • 1. HIPAA –HITECH e-Prescribing & Risk Analysis Valdez Ladd – CISSP, CISA, MBA, MS ISM, MAIA, ISO TC 215 WG 4
  • 3.
  • 4.
  • 5.
  • 6.
  • 7. HIPAA – HITECH e-Prescribing & Risk Analysis The Center for Improving Medication Management www.thecimm.org
  • 8. HIPAA – HITECH e-Prescribing & Risk Analysis The Center for Improving Medication Management www.thecimm.org
  • 9. Delaware E-Prescribing Process Flow 42nd ISM Annual Conference September 1, 2009 Physician Software vendors Pharmacy Network Surescripts SIG Master Beneficiary and Formulary Database Surescripts PRN Medicaid Other Pharmacy Benefit Manager Other Payers Mail Order Pharmacy Retail Pharmacy Pharmacy Network Payer Network Institutional Pharmacy
  • 10.
  • 11.
  • 12.
  • 13.
  • 14.
  • 15.
  • 16.
  • 17.
  • 18.
  • 19.
  • 20.
  • 21.

Notas del editor

  1. Two-factor credentials include two of the following: – Something you know—password, PIN. – Something you have—hard token separate from computer being accessed. – Something you are—any biometric that meets the DEA’s requirements (e.g., must operate at a false match rate of 0.001 or lower, etc.). • Prescribers must retain sole possession of hard tokens (if used) and must not share passwords, other knowledge factors, or biometric information with anyone. Failure by prescribers to secure these items may be the basis for revocation or suspension of their DEA registration.
  2. Two-factor credentials include two of the following: – Something you know—password, PIN. – Something you have—hard token separate from computer being accessed. – Something you are—any biometric that meets the DEA’s requirements (e.g., must operate at a false match rate of 0.001 or lower, etc.). • Prescribers must retain sole possession of hard tokens (if used) and must not share passwords, other knowledge factors, or biometric information with anyone. Failure by prescribers to secure these items may be the basis for revocation or suspension of their DEA registration.
  3. SSAE 16 Audit Process - Statement on Standards for Attestation Engagements (SSAE) No. 16 An SSAE 16 (SOC 1) can only be performed by a CPA or CPA Firm, however SSAE 16 effectively replaces Statement on Auditing Standards No. 70 (SAS 70) for service auditor's reporting periods ending on or after June 15, 2011. Two (2) types of SSAE 16 reports are to be issued, a Type 1 and a Type 2.  Additionally, SSAE 16 requires that the service organization provide a description of its "system" along with a written assertion by management. For a brief overview of the SSAE 16 (SOC 1) Audit Process, please see below: - On-site consultation to support management in pinpointing the control objectives and control procedures. - Present guidance to management regarding the adequacy of their control objectives and controls. - Execute the on-site testing at various points in time during the testing period to ascertain the effectiveness of the controls put into operation as well as the operating effectiveness of the controls for Type II reports. Testing typically includes inquiry, inspection, and observation. - Preparation of the draft report to be evaluated by the service organization for accuracy and completeness of the details. Distribution of a findings memo to management noting any control deficiencies uncovered throughout the course of the review. Delivery of the SSAE 16 report in hardcopy and electronic PDF format. Some issues to be aware of: The audit should be limited to the area(s) of the business which the service offering under review touches as it is being performed. If controls are being tested that do not have a correlation to the service under review, they should be excluded. Having superfluous controls in place will lead to more complex, higher cost, and a higher chance for a failure on the report.