John Hopkins Medical Center has just been notified via letter that they have been selected for a security audit by the OCR. This review is not due to a compliant but rather a random review. The letter states that they will receive additional information and instructions within the next month. John Hopkins Medical Center is a 400-bed hospital with a wide range of services. They frantically begin reviewing their security plan and all of the actions they have taken over the past few years as they wait for the additional information.

1. Identify actions that the medical center should review as they prepare for the audit.
2. Describe the audit process that the medical center can expect.