Although some of us may wish for simpler times, it would be nearly impossible for today’s health systems to be self-contained as they were in the past. Now that patients seek a more seamless and personalized care experience, hospitals need a way to meet their demand...
Read More
Did you know that all business associates of healthcare providers are subject to the same regulatory requirements for securing protected health information (“PHI”) as their clients? This includes subcontractors of business associates. In other words, if your service...
Read More
The scope of your SRA should include all IT assets that are involved in the creating, receiving, maintaining, or transmitting of e-PHI in your organization. HIPAA has been a big part of my working life since the Privacy Rule was finalized in August of 2002 and...
Read More
Risk assessments can now be efficient, comprehensive, and scalable. WaveFire, LLC, today announced the launch of a cross-industry innovative platform empowering risk management for cybersecurity, compliance and audit, supporting multiple regulatory frameworks.
Read More
Completing your analysis in accordance with the OCR’s Guidance on Risk Analysis Requirements under the HIPAA Security Rule. Per Section 164.308(a)(1)(ii)(A) of the HIPAA Security Rule, an organization must: Conduct an accurate and thorough assessment of the potential...
Read More