By Diane Evans
In discussing a recent data breach, last week’s post pointed out that a compliant risk assessment could minimize potential fines and disruption for healthcare organizations.
For executive leaders, a compliant risk assessment means setting parameters for how such an assessment should be conducted to meet standards under the Health Information Portability and Accountability Act (HIPAA).
A top priority: Search hard for vulnerabilities in all places where they exist. Find out what you don’t know, so you can put protections in place.
This requires intensive mapping and inventory, and workflow analysis.
Here are some questions to ask in considering where protected health information (PHI) resides within your organization.
Where can it be accessed?
Where is it created and stored?
Where is it received and transmitted?
The challenge is to check all places, including:
All electronic formats and devices
Physical locations
Remote locations
Always remember to document all your findings, as well as your risk mitigation plans.
Action Item for Long Term Care Executives: Refer to this user-friendly federal “Safer Series” report titled “Basics of Risk Analysis and Risk Management.” Visit our homepage at www.guardededge.com to download our complimentary Building Security Task List to aid in your risk assessment.
About the author
Diane Evans is founder of Guarded Edge, which offers training and an in-house implementation plan for compliance with the Health Insurance Portability and Accountability Act (HIPAA) within long-term care. Diane can be reached at devans@guardededge.com. She has offered accredited training for state and national organizations, including the Health Care Compliance Association and the Cleveland Metropolitan Bar Association.
#Data security management in long-term care
#HIPAA compliance for long-term care
#HIPAA risk assessement in long-term care
Comments