Vendors

Every outside company the practice pays, with what it touches, its BAA and its risk tier. A vendor serving every site matches any site you pick.

Managed IT: servers, backups and help desk. IT managed services, full patient records. Owner: Theo Brandt.

Ridgeline Management Services. Serves: Every site.

1 finding: Patient data without a signed BAA

Outsourced billing, coding and denial follow-up. Billing or coding service, full patient records. Owner: Keisha Okafor.

Ridgeline Management Services. Serves: Every site.

2 findings: Subcontractor handles our data without confirmed terms; High-risk vendor with no independent security evidence

Electronic claims and remittance clearinghouse. Claims clearinghouse, full patient records. Owner: Keisha Okafor.

Ridgeline Management Services. Serves: Every site.

1 finding: BAA is past its review date

Payer mix and denial trend dashboards. Analytics or reporting, limited patient data. Owner: Keisha Okafor.

Ridgeline Management Services. Serves: Every site.

1 finding: Security questionnaire older than 12 months

Offsite backup of servers and imaging archive. Cloud hosting or backup, full patient records. Owner: Theo Brandt.

Ridgeline Management Services. Serves: Every site.

Outside counsel for malpractice defense. Legal, accounting or consulting, limited patient data. Owner: Marisol Vance.

Ridgeline Management Services. Serves: Every site.

Annual financial audit and tax filings. Legal, accounting or consulting, no patient data. Owner: Owen Castellano.

Ridgeline Management Services. Serves: Every site.

Payroll and benefits administration. Legal, accounting or consulting, no patient data. Owner: Owen Castellano.

Ridgeline Management Services. Serves: Every site.