From the FierceHealthIT article: To make sure your organization is prepared at all times for any HIPAA audit or investigation, keep risk assessment documentation and other compliance evidence in a central location, recommended Mark Dill, director of information security at Cleveland Clinic in an interview with HealthcareInfoSecurity.
Dill said his group wants to be prepared if at any time they are faced with an audit from the U.S. Department of Health & Human Services' Office of Civil Rights.
Click here to read the article: http://www.fiercehealthit.com/story/5-recommendations-preparing-hipaa-audit/2013-08-22#ixzz2co5tyYHz