RISK Analysis - Recurring
HIPAA RISK ANALYSIS - RECURRING
Regular review (at least annually) of your organization's administrative, physical and technical safeguards to protect the security of your patients’ protected health information IS VITAL
According to the HIPAA Security Rule, a risk analysis must be conducted in order to successfully ensure the privacy and security of protected health information.
This risk assessment/analysis process will not only satisfy HIPAA's Security rule but also the Advancing Care Information category which is a one of 4 parts of the Merit-based Incentive Payment System (MIPA) which requires a successful Security Risk Analysis
The process includes:
- Observing and Identifying
- Documenting
- Gathering information
- Developing remediation plans and
- Working with management to prioritize and design a risk mitigation plan (Risk Management)
Note: Our HIPAA program does not include computer software support, practice management software support, computer hardware support or internet technology support or services
Please allow half a day to a full day, depending on the size and complexity of the facility, to complete the assessment. We require the Practice Manager or designated HIPAA compliance officer's assistance in order to conduct the assessment
