Group Practice Tech

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're talking about the security standards that go along with accepting credit cards in your therapy practice.

We discuss PCI DSS (Payment Card Industry Data Security Standard) compliance and where it is applicable; what payment processors handle; documentation; not handling or storing the full payment information for clients; the different types of security required for HIPAA compliance vs PCI compliance; why you don't need a BAA with your payment processor; and the intersection of compliance components for PCI and for HIPAA.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Article: What is PCI DSS and Why Do I Care?

CE course: Teletherapy and Remote Payment Methods, Legal-Ethical and Practical Considerations

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours

+ assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for *all* team members at no per-person cost)

+ assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

+ more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're offering up a refresher on teletherapy skills.

We discuss the American Telemedicine Association (ATA) standards; our clinical staff teletherapy training (which includes a video presentation skills section); teletherapy considerations for home workspaces; our Remote Workspace Center which has step by step tutorials for a secure home office; troubleshooting telehealth sessions; and staying on top of current best practices with training.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

PCT's Clinical Staff Teletherapy Training (5 CE credit hours, 3 of which are designated as legal-ethical CE)

PCT's Teletherapy Program Director/Supervisor Training (18.5 CE credit hours, plus 6+ CE credit hours of included topical bonus courses)

PCT's Video Presentation Skills In Telemental Health, Both Basic And Intermediate (2 CE credit hours)

PCT's video teletherapy skills coaching service, "Lights, Camera, Therapy"

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours

+ assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices (for *all* team members at no per-person cost)

+ assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces(for *all* team members at no per-person cost)

+ more

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we explain what group practice owners need to know about antivirus protection.

We discuss what implementing antivirus software actually entails; who needs antivirus software; resources for free antivirus software for Windows and Mac; the importance of regularly updating security software; what is the responsibility of the group practice; whether a BAA is necessary with an antivirus and antimalware provider; and our Device Security Center, where you can find more information on the other technical security steps required for any devices touching PHI.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + Step Step 5 (Manual & Materials) Support Forums

• assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)
• assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost)
• And more!

PCT's Computer & Smartphone HIPAA Security Checklist for Therapists

PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity *and/or* Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.

Policies & Procedures include:

• Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.
• Computing Devices and Electronic Media Technical Security Policy
• Bring Your Own Device (BYOD) Policy
• Communications Security Policy
• Information Systems Secure Use Policy
• Risk Management Policy
• Contingency Planning Policy
• Device and Document Transport and Storage Policy
• Device and Document Disposal Policy
• Security Training and Awareness Policy
• Passwords and Other Digital Authentication Policy
• Software and Hardware Selection Policy
• Security Incident Response and Breach Notification Policy
• Security Onboarding and Exit Policy
• Sanction Policy Policy
• Release of Information Security Policy
• Remote Access Policy
• Data Backup Policy
• Facility/Office Access and Physical Security Policy
• Facility Network Security Policy
• Computing Device Acceptable Use Policy
• Business Associate Policy
• Access Log Review Policy

Forms & Logs include:

• Workforce Security Policies Agreement
• Security Incident Report
• PHI Access Determination
• Password Policy Compliance
• BYOD Registration & Termination
• Data Backup & Confirmation
• Access Log Review
• Key & Access Code Issue and Loss
• Third-Party Service Vendors
• Building Security Plan
• Security Schedule
• Equipment Security Check
• Computing System Access Granting & Revocation
• Training Completion
• Mini Risk Analysis
• Security Incident Response
• Security Reminder
• Practice Equipment Catalog

Plus:

• Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures (includes the prohibitions on non-HIPAA-acceptable personal services + defines what personal services *are* allowable.)
• 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we're talking about Bring Your Own Device policies for group practices.

We discuss pros and cons of BYOD for group practice; allowing team members to use their preferred operating system to increase efficiency and reduce errors; standards for device security; endpoint management software; personal smartphone use; BYOD in the context of client care; device security training as a staff benefit; and Group Practice Care, which includes our system for easily managing personal device security and documentation.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + Step Step 5 (Manual & Materials) Support Forums

• assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

• assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost)

• And more!

PCT's Computer & Smartphone HIPAA Security Checklist for Therapists

PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity *and/or* Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.

Policies & Procedures include:

• Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.

• Computing Devices and Electronic Media Technical Security Policy

• Bring Your Own Device (BYOD) Policy

• Communications Security Policy

• Information Systems Secure Use Policy

• Risk Management Policy

• Contingency Planning Policy

• Device and Document Transport and Storage Policy

• Device and Document Disposal Policy

• Security Training and Awareness Policy

• Passwords and Other Digital Authentication Policy

• Software and Hardware Selection Policy

• Security Incident Response and Breach Notification Policy

• Security Onboarding and Exit Policy

• Sanction Policy Policy

• Release of Information Security Policy

• Remote Access Policy

• Data Backup Policy

• Facility/Office Access and Physical Security Policy

• Facility Network Security Policy

• Computing Device Acceptable Use Policy

• Business Associate Policy

• Access Log Review Policy

Forms & Logs include:

• Workforce Security Policies Agreement

• Security Incident Report

• PHI Access Determination

• Password Policy Compliance

• BYOD Registration & Termination

• Data Backup & Confirmation

• Access Log Review

• Key & Access Code Issue and Loss

• Third-Party Service Vendors

• Building Security Plan

• Security Schedule

• Equipment Security Check

• Computing System Access Granting & Revocation

• Training Completion

• Mini Risk Analysis

• Security Incident Response

• Security Reminder

• Practice Equipment Catalog

Plus:

• Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures (includes the prohibitions on non-HIPAA-acceptable personal services + defines what personal services *are* allowable.)

• 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.

PCT's free "mini risk" tool, for needs identification related to what's within and what's outside your practice's Security Circle (including personal device use)

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we dive into the HIPAA Conduit Exception Rule to explore what personal services are okay for group practice staff to use.

We discuss security circles; which services are generally prohibited; the HIPAA Conduit Exception Rule; what qualifies as a HIPAA conduit; email services; phone services; home internet services; VPNs; and mobile hotspots.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours + Step Step 5 (Manual & Materials) Support Forums

• assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

• assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost)

• And more!

PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity *and/or* Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.

Policies & Procedures include:

• Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.

• Computing Devices and Electronic Media Technical Security Policy

• Bring Your Own Device (BYOD) Policy

• Communications Security Policy

• Information Systems Secure Use Policy

• Risk Management Policy

• Contingency Planning Policy

• Device and Document Transport and Storage Policy

• Device and Document Disposal Policy

• Security Training and Awareness Policy

• Passwords and Other Digital Authentication Policy

• Software and Hardware Selection Policy

• Security Incident Response and Breach Notification Policy

• Security Onboarding and Exit Policy

• Sanction Policy Policy

• Release of Information Security Policy

• Remote Access Policy

• Data Backup Policy

• Facility/Office Access and Physical Security Policy

• Facility Network Security Policy

• Computing Device Acceptable Use Policy

• Business Associate Policy

• Access Log Review Policy

Forms & Logs include:

• Workforce Security Policies Agreement

• Security Incident Report

• PHI Access Determination

• Password Policy Compliance

• BYOD Registration & Termination

• Data Backup & Confirmation

• Access Log Review

• Key & Access Code Issue and Loss

• Third-Party Service Vendors

• Building Security Plan

• Security Schedule

• Equipment Security Check

• Computing System Access Granting & Revocation

• Training Completion

• Mini Risk Analysis

• Security Incident Response

• Security Reminder

• Practice Equipment Catalog

Plus:

• Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures (includes the prohibitions on non-HIPAA-acceptable personal services + defines what personal services *are* allowable.)

• 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.

PCT's free "mini risk" tool, for needs identification related to what's within and what's outside your practice's Security Circle (including personal service use)

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

Our latest episode is an audio replay of our recent panel with ZynnyMe and Ström Consulting on what therapists need to be aware of regarding terms and conditions.

We discuss the red flags from Simple Practice's new T&Cs; Zoom's updated T&Cs; the differences in these two situations; the impacts of certain T&Cs; steps to evaluate services for meeting needs as well as trust and transparency; the difference between HIPAA compliance and HIPAA consistency; healthcare companies using customer data to train AI models; Simple Practice providing untrue information about what is and isn't PHI; liability after agreeing to new T&Cs; BetterHelp's fines from the FTC; how professional organizations are responding; green and red flags to consider for service providers; informed consent for clients; short and long term EHR considerations for practice owners; voting with your dollars; recommended EHRs; Open Notes and client access to records; and backing up data.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

EHR/Practice Management Reviews by Rob Rienhardt LPCS, M.Ed., NCC at Tame Your Practice

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service with PCT consulting team + monthly session co-facilitated by Eric Ström, JD PhD LMHC

+ assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

+ assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost) + more

PCT's Group Practice Service Selection Workbook & Worksheets (free!! Step 1 of the PCT Way) -- support for selecting HIPAA-secure, effective, and economical phone, video, and communication platforms (and your other practice functionality needs, too!)

PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You'll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

PCT CE Training: The "Open Notes" Rule and Your EHR Choice: Legal Compliance and Client Safety Now and in The Future presented by Rob Rienhardt, LPCS M.Ed., NCC, Eric Ström, JD PhD LMHC, and Roy Huggins, LPC NCC

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we address questions regarding migrating from one EHR to a new EHR and the HIPAA security considerations that need to be taken into account when doing so.

We discuss the process of migrating and importing demographic data from one EHR to another; device encryption and the importance of a secure device while migrating highly sensitive data; how to use Google Drive to safely backup and safeguard your information; and risk management practices to avoid.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours plus:

• Step 5 (Manual & Materials) Support Forums

• Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members

• Access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

• Assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost)

• And more!

Google Workspace Configuration Help Center (free!)

For Solo Practitioners, Solo Practice Care Premium for weekly (live & recorded) direct support & consultation service, Office Hours, with the PCT team

Plus: Device Security Center access and Home & Mobile Office Security Center access

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we discuss due diligence with Terms & Conditions and Business Associate Agreements, particularly with the recent updates to Simple Practice and Zoom.  

We cover common pitfalls we see around accepting Terms & Conditions (T&Cs); what’s required for a HIPAA compliant Business Associate Agreement (BAA); how to evaluate a BAA; Simple Practice’s revamped T&Cs; Zoom’s updated T&Cs; considerations for switching systems; and when to get an attorney’s opinion.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

• ZynnyMe Blog on the SimplePractice T&C changes

• SimplePractice's new T&C

• SimplePractice Response Blog Post and FAQ about T&C changes

• StackDiary article: Zoom's Updated Terms of Service Permit Training AI on User Content Without Opt-Out

• Zoom Blog: How Zoom’s terms of service and practices apply to AI features

• Zoom's new TOS/T&C

• AP News Fact Check article

• How to not opt in: Zoom AI Training: How to Turn Off New Permissions (TLDR; never accept the “Zoom IQ Meeting Summary” prompt)

• HHS' model BAA

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service with PCT consulting team + monthly session co-facilitated by Eric Ström, JD PhD LMHC; also includes:

• Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

• Assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost)

• And more!

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we share tips on how to demystify what HIPAA compliance means for you and your practice.

We discuss making compliance accessible and manageable instead of overwhelming; compliance as an ongoing process and set of behaviors; distributing the HIPAA workload; focusing on what you’re doing well already; tips for engaging with HIPAA compliance on an ongoing basis; resources we offer that can help lessen HIPAA overwhelm; how much time to actually set aside for these tasks; and acknowledging the vulnerability required in the HIPAA process.

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours plus: 

• Step 5 (Manual & Materials) Support Forums

• Assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

• Assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost)

• And more!

PCT's HIPAA Risk Analysis & Risk Mitigation Planning service for mental health group practices -- care for your practice using our supportive, shame-free risk analysis and mitigation planning service. You’ll have your Risk Analysis done within 2 hours, performed by a PCT consultant, using a tool built specifically for mental health group practice, and a mitigation checklist to help you reduce your risks.

PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity *and/or* Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid.

Policies & Procedures include:

• Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.

• Computing Devices and Electronic Media Technical Security Policy

• Bring Your Own Device (BYOD) Policy

• Communications Security Policy

• Information Systems Secure Use Policy

• Risk Management Policy

• Contingency Planning Policy

• Device and Document Transport and Storage Policy

• Device and Document Disposal Policy

• Security Training and Awareness Policy

• Passwords and Other Digital Authentication Policy

• Software and Hardware Selection Policy

• Security Incident Response and Breach Notification Policy

• Security Onboarding and Exit Policy

• Sanction Policy Policy

• Release of Information Security Policy

• Remote Access Policy

• Data Backup Policy

• Facility/Office Access and Physical Security Policy

• Facility Network Security Policy

• Computing Device Acceptable Use Policy

• Business Associate Policy

• Access Log Review Policy

Forms & Logs include:

• Workforce Security Policies Agreement

• Security Incident Report

• PHI Access Determination

• Password Policy Compliance

• BYOD Registration & Termination

• Data Backup & Confirmation

• Access Log Review

• Key & Access Code Issue and Loss

• Third-Party Service Vendors

• Building Security Plan

• Security Schedule

• Equipment Security Check

• Computing System Access Granting & Revocation

• Training Completion

• Mini Risk Analysis

• Security Incident Response

• Security Reminder

• Practice Equipment Catalog

Also included:

• Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures

• 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.

• PCT Staff Trainings -- fundamental + topical, needs-based training for HIPAA, Privacy Ethics, Teletherapy, and more!

PCT'S HIPAA-Security Awareness Meme-Minders (free!)

Welcome solo and group practice owners! We are Liath Dalton and Evan Dumas, your co-hosts of Group Practice Tech.

In our latest episode, we take a shame-free look at policies and procedures and why they’re beneficial to have in place. 

We discuss using in practice behavior to inform policies & procedures; risk analysis; the benefits of having everything written down; how to decide where to start; reducing cognitive overhead and burnout; being prepared for security incidents; HIPAA compliance as a set of behaviors, not a product or a checklist; and the resources PCT offers around policies & procedures. 

Listen here: https://personcenteredtech.com/group/podcast/

For more, visit our website.

PCT's Group Practice PCT Way HIPAA Compliance Manual & Materials -- comprehensive HIPAA Security Policies & Procedures for the practice as HIPAA covered entity *and/or* Business Associate/MSO. Comprehensively covers the HIPAA P&Ps for contractor clinician structure group practices, employee structure group practices, and practices that are hybrid. 

Policies & Procedures include: Customizable templates that address each of the HIPAA Security Rule Standards. Ready for plug-and-play real practice application.

• Computing Devices and Electronic Media Technical Security Policy

• Bring Your Own Device (BYOD) Policy

• Communications Security Policy

• Information Systems Secure Use Policy

• Risk Management Policy

• Contingency Planning Policy

• Device and Document Transport and Storage Policy

• Device and Document Disposal Policy

• Security Training and Awareness Policy

• Passwords and Other Digital Authentication Policy

• Software and Hardware Selection Policy

• Security Incident Response and Breach Notification Policy

• Security Onboarding and Exit Policy

• Sanction Policy Policy

• Release of Information Security Policy

• Remote Access Policy

• Data Backup Policy

• Facility/Office Access and Physical Security Policy

• Facility Network Security Policy

• Computing Device Acceptable Use Policy

• Business Associate Policy

• Access Log Review Policy

Forms & Logs include:

• Workforce Security Policies Agreement

• Security Incident Report

• PHI Access Determination

• Password Policy Compliance

• BYOD Registration & Termination

• Data Backup & Confirmation

• Access Log Review

• Key & Access Code Issue and Loss

• Third-Party Service Vendors

• Building Security Plan

• Security Schedule

• Equipment Security Check

• Computing System Access Granting & Revocation

• Training Completion

• Mini Risk Analysis

• Security Incident Response

• Security Reminder

• Practice Equipment Catalog

+ Workforce Security Manual & Leadership Security Manual -- the role-based practical application oriented distillation of the formal Policies & Procedures

+ 2 complimentary seats of the Security Officer Endorsement Training Program (1 for Security Officer; 1 for Deputy (or future Deputy) Security Officer.

Pair with Group Practice Care Premium for weekly (live & recorded) direct support & consultation service, Group Practice Office Hours 

+ Step 5 (Manual & Materials) Support Forums

+ assignable staff HIPAA Security Awareness: Remote Workspaces training for all team members + access to Remote Workspace Center with step-by-step tutorials & registration forms for securing documenting Remote Workspaces (for *all* team members at no per-person cost)

+ assignable staff HIPAA Security Awareness: Bring Your Own Device training + access to Device Security Center with step-by-step device-specific tutorials & registration forms for securing documenting personal & practice-provided devices(for *all* team members at no per-person cost)

+ more