RISK Assessment - Initial

     The requirement by HIPAA for conducting risk assessments has been in place since 2003.  However, few health care providers have completed the assessment  

     The rule was put in place to help healthcare providers uncover potential weaknesses in their security policies, processes and systems  

     It requires organizations that handle protected health information to put in place and then regularly review their administrative, physical and technical safeguards to protect the security of their patients’ protected health information

According to the HIPAA Security Rule, a risk assessment must be conducted in order to ensure the privacy and security of Protected Health Information (PHI)

This risk assessment/analysis process will not only satisfy HIPAA's Security rule but also the Advancing Care Information category which is a one of 4 parts of the Merit-based Incentive Payment System (MIPA) which requires a successful Security Risk Analysis

The risk assessment process will consist of:

• Observing and identifying
• Documenting
• Gathering
• Interviewing
• Developing remediation plans and
• Working with management to prioritize and design a risk mitigation plan

Note:   Our HIPAA program does not include computer software support, practice management software support, computer hardware support or internet technology support or services

Please allow half a day to a full day, depending on the size and complexity of the facility, for the manager to assist in conducting a full assessment