Signing on the dotted line of HIPAA

摘要

Given that a misrepresentation of the facts during attestation could result in civil and criminal penalties, what does a health care executive need to feel comfortable about before signing on the dotted line? Since the meaningful use objective for security and privacy requires a HIPAA Security Rule-based risk analysis, we know the examination must include scoping, data collection, identification and documentation of potential threats and vulnerabilities, as well as an assessment of current security measures.