Take key lessons learned from latest high-dollar Security Rule settlement

Why This Topic Matters

The piece highlights a high-dollar enforcement action and connects it to practical security governance topics that affect covered entities and business associates. It helps readers understand the kinds of organizational safeguards and preparedness measures that are being emphasized in current HIPAA security enforcement.

Article Sections

1. Compliance

   Introduces the OCR settlement and summarizes the broad HIPAA Security Rule issues raised by the investigation. It also outlines general remediation themes and security priorities for covered entities and business associates.

2. Risk analysis and management

   Discusses the broader topic of risk analysis, vulnerability management, and related security planning practices. It also touches on commonly used frameworks and general operational considerations for maintaining a security program.

3. Craft contingency planning

   Reviews contingency planning as a security preparedness topic, including business continuity and recovery planning concepts. It also addresses general training and exercise practices used to support response readiness.