medmutual- Security Risk Assessment

Security Risk Assessment

Description

HIPAA/HITECH requires each covered entity (physician practices, hospitals, pharmacies, health plans and others) and their business associates, to have security policies and procedures in place, and to conduct and document a Security Risk Assessment. Not only is this a good business practice, it can help avoid a breach under HIPAA, which can have very serious financial and reputational consequences. This internet activity enduring material will concentrate on the federal requirements for protecting electronic protected health information (ePHI), provide an overview of HIPAA security policies and procedures required for physician practices, and describe how to conduct the HIPAA-mandated Security Risk Assessment.

This internet activity enduring material was produced by Medical Mutual for Professionals Advocate and Medical Mutual policyholders.

About the Presenter:

Melissa (Lisa) Thompson, JD, MPH, is a health care lawyer and life sciences regulatory attorney practicing with LeClairRyan, PC, a national firm with offices in Annapolis, Maryland, and other locations across the country

Lessons

Security Risk Assessment

Estimated Length: 1 hour(s) and 25 minute(s)

Lessons

Name	View Schedule
1. Security Risk Assessment	-

Name

View Schedule

1. Security Risk Assessment

Objectives

Upon completion of this internet activity enduring material, seminar participants will be better able to:

Understand and obtain access to tools to perform a Security Risk Assessment
Understand what the federal government requires for the protection of patient information, including electronic protected health information (ePHI), and in assessing and managing security risks
Review your practice’s security policies and procedures against HIPAA requirements
Learn how to identify and manage security risks in your practice
Understand the role your Business Associates and others play in your risk exposure and ways to help mitigate that risk