There is a frequent issue with people understanding what a Security Risk Analysis includes. In fact, there is so much confusion we often see documents presented as a risk analysis that is actually a gap analysis. It happens so often that OCR is trying to address it in their April newsletter. We are going to take a stab at explaining what gap analysis reports look like vs what a security risk analysis report really includes when done properly.

For more information: HelpMeWithHIPAA.com/154

Back in January, I read an article in Forbes titled: The Five Laws Of Cybersecurity.  When reading it I realized that it was a great message to our listeners but it needed a HIPAA flavor added it to it.  This episode we add our thoughts to his article and turn it into 5 Laws of HIPAA Cybersecurity.

For more details HelpMeWithHIPAA.com/153

More news on the insider front makes it necessary to point out, again, how susceptible healthcare is to insider failures.

HelpMeWithHIPAA.com/152

The American Medical Association (AMA) did a survey of physicians and their thoughts about privacy and security practices. It was interesting to hear their responses. Also, when a group of Security Officers gets together for a chat some people glaze over.  For nerds like us, it is an exciting discussion. Today we are going to discuss the Security Officer panel topics and the AMA report presentation from the National HIPAA Summit.

HelpMeWithHIPAA.com/151

Are you ready for extreme vendor vetting? Many vendors have been pushing back against any covered entity or business associate that asked them to answer questions about their privacy and security programs. They believe signing a business associate agreement (BAA) meets the legal requirements and that is all they must do. Well, the times they are a changing - again.  There are many different factors making it necessary to ask these type questions and not just accept a BAA as reasonable assurances. What are those factors and how things are changing are the topics we discuss in this episode.

For more go to HelpMeWithHIPAA.com/150

The National HIPAA Summit always features some interesting news from OCR concerning guidance, enforcement, and audits.  This year was no different. In this episode, we discuss the highlights as we interpreted them anyway.

More at HelpMeWithHIPAA.com/149

Cybersecurity trends sound scary when you hear us talk about some of this stuff.  Cyberscary is actually what we decided to call it.  The good news is we do talk about other things sometimes. There are two reports that came out in recent weeks have gotten my attention and just have to be discussed with you guys.

More info at HelpMeWithHIPAA.com/148

Cybersecurity legal requirements keep changing at the state, federal, and international level.  Most of the changes are just trying to keep up with the constantly changing landscape of threats in cyberspace. Today we call in an expert, Mitzi Hill, to talk to us about those cybersecurity legal requirements.  How those changes may impact your business and your privacy and security program is certainly something we don’t want to lose track of in the mix.

More information at HelpMeWithHIPAA.com/147

We get questions from listeners on a pretty regular basis.  When they come in from an email we do our best to reply with an answer.  Sometimes they get backed up for us to get them on the show, however. Today we are covering some of those, in fact, we are covering 6 listener questions.

HelpMeWithHIPAA.com/146

News abounds about Uber and other ride-sharing services taking people to their doctor appointments.  They say they have it covered and Uber Health HIPAA compliance is solid. Today we look at what they are saying about HIPAA here and what that means to us.

More info at HelpMeWithHIPAA.com/145