HIPAA for the Clinician, Part 4, What an OCR Investigation Looks Like will evertsen Introduction Most covered entities have a vague, uncomfortable sense that an OCR investigation is something to be avoided. Fewer still have a clear picture of what one involves, how it starts,
Tag: healthcare cybersecurity
HIPAA for the Clinician, Part 3 Business Associate Agreements – What They Must Contain and Why Most Don’t
What the Change Healthcare Attack Should Have Taught Every Covered Entity
What the Change Healthcare Attack Should Have Taught Every Covered Entity will evertsen Introduction On February 21, 2024, Change Healthcare went offline. The ransomware attack that took it down was not subtle. Within hours, claims processing across thousands of practices, hospitals, and pharmacies ground to a halt. Prescriptions couldn’t be filled. Claims couldn’t
Your Completed Risk Assessment Just Became a Liability
Small Practice, Big Target: Why Solo and Group Practices Are Healthcare’s Most Vulnerable Entities
HIPAA for the Clinician, Part 1: What You’re Actually Responsible For
Your EHR Is Not Your Compliance Program
Your EHR Is Not Your Compliance Program The call to the EHR vendor’s support line goes something like this: A practice administrator has just received an OCR data request letter and is trying to figure out what documentation they need to produce. Somewhere in the conversation, they ask the support rep
