SecurityMetrics Releases 2018 Guide to HIPAA Compliance
Comprehensive guide helps organizations fulfill most challenging HIPAA requirements.
Dec 05, 2017, 08:00 ET
OREM, Utah, Dec. 5, 2017 /PRNewswire/ -- Despite advances in security technology and increased governmental cybersecurity initiatives, attackers will not abandon their pursuit of unprotected patient data. According to the Identity Theft Resource Center, this past year healthcare entities accounted for 27.4% of reported data breaches.
It's clear that the healthcare industry is less prepared with HIPAA compliance than patients expect. HIPAA compliance, especially the Security Rule, has never been more necessary as the value of patient data continues to rise on the dark web.
To help organizations protect themselves, SecurityMetrics has released the 2018 Guide to HIPAA Compliance. With new survey data from over 300 healthcare professionals, insights and tips from HIPAA security analysts, recent case studies, and recommended best practices, this 135-page guide will serve as a comprehensive reference to help practice managers, IT teams, doctors, CEOs, and others understand HIPAA compliance, become compliant with applicable HIPAA requirements, and protect patient data and privacy.
Based on the Department of Health and Human Services' (HHS) Health Insurance Portability and Accountability Act (HIPAA), SecurityMetrics conducted 4 surveys in 2017. These surveys were intended to analyze various aspects specific to HIPAA's Security, Breach Notification, and Privacy Rules. Over 300 healthcare professionals responsible for HIPAA compliance at their organization responded. Here are a few examples of the responses, which shed light on organizational security habits in areas like HIPAA training, risk analysis, and encryption:
- 26% of organizations do not conduct a formal risk analysis
- 16% of organizations report they send emails with unencrypted patient data
- Only 34% of organizations train employees on the HIPAA Breach Notification Rule
"Our guide was specifically created to help covered entities and business associates address the most problematic issues within HIPAA compliance," says Brand Barney
The new guide focuses on important elements from the HIPAA Privacy, Breach Notification, and Security Rules, including:
- Incident response plans
- PHI encryption
- Business associate agreements
- Mobile device security
- HIPAA-compliant emails
- Remote access
- Vulnerability scanning
- Penetration testing
It also includes a new section called "How to Read this Guide," intended to direct readers of all HIPAA knowledge and experience levels to the sections of the guide that will be most relevant and useful for them.
Whether the reader is a new employee with limited HIPAA knowledge or an experienced system administrator, SecurityMetrics hopes this guide will ultimately help organizations secure their environment, become compliant with applicable HIPAA requirements, and protect patient data and privacy.
Download the 2018 SecurityMetrics Guide to HIPAA Compliance
To learn more about SecurityMetrics or HIPAA, contact 801.705.5665, email consulting@securitymetrics.com, or visit www.securitymetrics.com/hipaa.
For press inquiries contact 801-995-6516, or email pr@securitymetrics.com.
About SecurityMetrics (www.securitymetrics.com)
SecurityMetrics is a global leader in data security that enables organizations of all sizes to comply with government, healthcare, and financial mandates. Since its founding date, the company has tested over 1 million systems for data security and compliance. Among other services, SecurityMetrics offers HIPAA compliance services, penetration testing, security consulting, mobile device vulnerability scanning, payment data discovery, and incident response. Founded in October 2000, SecurityMetrics is a privately held corporation headquartered in Orem, Utah.
Related Links
http://www.securitymetrics.com
SOURCE SecurityMetrics
Share this article