Doing a HIPAA Security Risk Assessment

Doing a HIPAA Security Risk Assessment

Your organization’s annual HIPAA Security Risk Assessment and Analysis are only one element of the compliance process, and whether you’re a Business Associate or Covered Entity, your organization must also “implement security updates as necessary and correct identified security deficiencies”. In other words, you must act via a Corrective Action Plan (CAP) following the required risk assessment process.

Here are a few common Corrective Action Plan steps:

  • Implement technical policies and procedures to allow access only to those persons or software programs that have been granted access rights to information systems maintained.
  • Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports.
  • Conduct accurate and thorough assessments of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of ePHI.
  • Develop a complete inventory of all its categories of electronic equipmentdata systems, and applications that contain or store ePHI, which will then be incorporated into its Risk Analysis, and must complete a Risk Management plan.

 

What happens if I fail to complete my Security Risk Assessment?

Failing to complete your annual Risk Assessment oftentimes means the organization will be required to complete a “robust” Corrective Action Plan (CAP) and often with at least two years of monitoring activity.

Have you ever doubted whether a small billing company or independent physician practice actually ever face penalties?

Well, keep in mind, a Business Associate is a ‘person’ or ‘entity’. This means that there is no billing company too small to have to comply with the Federal HIPAA regulations. Again, if you have not completed an accurate and thorough security risk assessment prior to that, you could also be penalized under ‘willful neglect’. This category alone is $50,000 per violation!

It is important for you to understand that every complaint or potential breach must be investigated by HHS/OCR. If you, a billing company, or another vendor suspects a breach, you must inform the covered entity (your client) and have a breach risk assessment completed to determine key factors and take action.

 

An EZClaim partner, Live Compliance, will help you to make checking off your compliance requirements extremely simple. They provide:

  • Completely online, our role-based courses make training easy for remote or in-office employees.
  • Contact-free, accurate Security Risk Assessments are conducted remotely. All devices are thoroughly analyzed regardless of location. Conducting an accurate and thorough Security Risk Assessment is not only required but is a useful tool to expose potential vulnerabilities.
  • Complete set of HIPAA Policies and procedures built directly into your portal. Includes actionability, change management documentation, and Incident Response Policy to assist with your Corrective Action Planning. Easily share policies with staff with one click.
  • Built directly into your portal, easily monitor where your workforce may be vulnerable with our Dark Web Breach Searches. Easily expose breach sources with ongoing searching of active employee email or domain ensuring continued awareness of potential breach exposure. Weekly automatic email notifications if new breaches are discovered.
  • Short, informative, privacy awareness videos covering technical, administrative, and physical safeguards with topics such as ransomware, phishing, the Dark Web, password protection, and more. All delivered monthly with no logins required, they empower your workforce to make conscious decisions when it comes to your organization’s privacy and security.

 

So, don’t risk your company’s future, especially when Live Compliance is offering a FREE Organization Assessment to help determine your company’s status. For more information, visit their website, e-mail them, or give them a call at 980.999.1585.


ABOUT EZCLAIM:
EZClaim is a medical billing and scheduling software company that provides a best-in-class product, with correspondingly exceptional service and support. Combined, they help improve medical billing revenues. To learn more, visit EZClaim’s website, e-mail them, or call them today at 877.650.0904.

[ Contribution by Jim Johnson with Live Compliance ]

Home Care Industry FAQ

Home Care Industry FAQ

Home care employers are confronting difficult questions regarding how to handle labor and management relations, leave and accommodation, safety and health, and other employment issues.

Littler, a law firm that focuses on labor and employment law, has produced an extensive home care industry FAQ document (41 pages) called “Home Care Industry Coronavirus (COVID-19) Employer Frequently Asked Questions. It provides general advice to help address some of the more common questions that home care employers currently face due to the COVID-19 pandemic. 

CONTENTS:
• Client/Patient Privacy/HIPAA
• FFCRA
• CARES Act (Including PPP)
• Unemployment
• ADA Considerations
• Leaves of Absence
• Wage & Hour
• WARN Act
• Workers’ Compensation
• Health and Safety
• Labor/Management Relations
• Employee Relations
 

Litter also has a specific page on their website that provides a useful resource for employers to learn how COVID-19 is affecting various aspects of employment law, and how different jurisdictions are addressing the outbreak. Because the COVID-19 situation is dynamic, with new governmental measures each day, Litter suggests that employers consult with counsel for the latest developments and updated guidance on this topic. Click here to view their resource page.

This information was sent to us by one of EZClaim’s premier partners, AxisCare, who provides a home care system designed with the workflow of a private duty agency in mind. AxisCare provides a scheduling software solution that features a GPS mobile app, automatic invoicing, billing and payroll integrations, custom forms, custom reporting, and more. For more details about their all-in-one home care software solution, view their website.

Since developments related to the COVID-19 pandemic are evolving on a daily basis, EZClaim is continuing to discover resources that will assist its clients in understanding these developments. As always, we are here to support your medical billing needs and hope you are safe and well in this challenging time.

For general information about EZClaim, or details about the features of our medical billing software, visit our website.

Click here to download the PDF