Information security has always been a part and parcel of the American Medical Billing Industry. With the HIPAA Omnibus rule making amendments to the privacy and security provisions of HIPAA, security requirements have become more complex necessitating the need for stringent controls in order to provide the most sophisticated levels of information security. VNS has implemented Information Security Management System (ISMS) designed in accordance with ISO standards, an approach towards mitigating information breach. VNS has identified appropriate security protocols for the enormous amount of electronic data and protected health information that the company handles on a daily basis. Compliance with ISO has provided the company a platform to further support the levels of security guaranteed by HIPAA.