• Location
• Implementation Specifications
• Threats and Vulnerabilities
• Risks
• Action Steps
• Documentation

 

The Office for Civil Rights (OCR), the HIPAA enforcement arm of the U. S. Department of Health and Human Services (HHS) has recently announced   alarming results of the Phase 2 Covered Entity HIPAA Compliance Audits. 94% failed the Risk Management Audit and 87% failed the Risk Analysis Audit! Every audited Covered Entity knew well in advance that it was on the short list to be audited, had completed pre-audit questionnaires and knew the exact questions it would be asked and documentation to be provided (audit protocols). Attend this session to learn how the Acts of HIPAA Risk Analysis – Risk Management, step-by-step, with the steps demonstrated and explained clearly in plain language. HIPAA Risk Analysis – Risk Management is the basis of your HIPAA Compliance Program. OCR rightly considers the most serious, most widespread HIPAA deficiency for Covered Entities and Business Associates – surpassing all others – is an organization's failure to perform a HIPAA Risk Analysis and implement a Risk Management program to address its Risks. The HIPAA Rules do not say how to do HIPAA Risk Analysis – Risk Management. OCR's limited 9 page guidance document refers organizations to technical procedures in manuals created by the National Institute of Standards and Technology (NIST) Computer Security Division and geared to "the computer security community". Several Federal "Security Risk Assessment Tools" are available, incomplete, cumbersome and have an explicit disclaimer – use of the tool does not guarantee compliance with federal, state or local laws. However, Federal Risk Analysis – Risk Management procedures are easy to follow, step-by-step, when you know the steps. This webinar explains and demonstrates those steps.