RISK Analysis - Initial

INITIAL HIPAA RISK ANALYSIS

HIPAA defines a Risk Analysis as:

an assessment of the risks and vulnerabilities that could negatively impact the confidentiality, integrity, and availability of the electronic protected health information (e-phi) held by a covered entity and the likelihood of occurrence

The HIPAA Privacy & Breach Notification rule also applies to ALL protected health information (PHI) whether in electronic paper or any other format

This risk analysis process will satisfy HIPAA's Privacy, Security & Breach Notification rules as well as the Advancing Care Information category which is a one of 4 parts of the Merit-based Incentive Payment System (MIPS) which requires a successful Security Risk Analysis

The 3 phases of the HIPAA Risk Analysis

The ASSESSMENT phase includes:

Observing, Identifying, Interviewing
Documenting
Gathering information
Developing remediation plans and
Working with management to prioritize and design a risk mitigation plan (Risk Management)

The MANUAL DEVELOPMENT phase includes:

Customized HIPAA Policies and Procedures
Customized HIPAA forms

The TRAINING phase includes:
In Person training or online training for workforce members on Privacy, Security & Breach Notification rules
In person or online training for HIPAA Privacy Officer/Administrator
Quiz to test understanding of the course content
Certificates provided at the completion of training

Please allow half a day to a full day, depending on the size and complexity of the facility, to complete the On-site assessment phase. We require the Practice Manager or designated HIPAA compliance officer's assistance in order to conduct the assessment as well as the assistance of your IT service provider

Note: Our HIPAA program does not include computer software support, practice management software support, computer hardware support or Internet Technology support or services

This RA is geared toward small to medium size Healthcare and Dental facilities