Recent HHS Guidance Underscores the Importance of HIPAA Compliance

Why This Topic Matters

The article helps readers understand why cybersecurity guidance from HHS and related organizations matters for protecting patient information, supporting compliance efforts, and reducing breach risk and associated costs.

Article Sections

1. The December 2018 HHS Health Industry Cybersecurity Practices Publication

   Introduces the HHS cybersecurity publication, its purpose, and its role in supporting healthcare cybersecurity awareness and guidance. Summarizes the publication’s overall scope and its relationship to industry-led best practices.

2. Practical Applications of the Guidance

   Discusses how the guidance may be applied within healthcare organizations through broader risk-management approaches. Also covers related cybersecurity framework concepts and the organizational areas emphasized in the article.

3. Designated Security Officer

   Describes the organizational responsibility for security leadership and the role discussed in the article within a compliance program.

4. Security Policy Framework

   Covers policy, procedure, and documentation topics associated with managing security risk and supporting organizational safeguards.

5. Annual Risk Analyses

   Addresses ongoing risk analysis activities and the article’s discussion of assessing threats, vulnerabilities, and organizational exposure.

6. Technical Safeguards

   Reviews technical safeguard concepts discussed in the article, including layered security, monitoring, and protection of sensitive information and systems.

7. Security Awareness and Training Program

   Summarizes the training-related aspects of the guidance, including workforce awareness and role-based education.

8. Conclusion

   Closes with the article’s high-level message about the value of using cybersecurity guidance to support compliance and risk reduction.