Tackle risk assessments as cyberthreats continue to threaten

Why This Topic Matters

Health care organizations face changing cyber risks and insider risks that can affect protected health information and operational integrity. The article helps readers understand the broad areas of HIPAA security and privacy management that should be reviewed and reinforced.

Article Sections

1. Compliance

   An overview of the compliance context for the discussion, including HIPAA-related risk management and oversight concerns.

2. Emerging cyberthreats and risk assessments

   Guidance on incorporating evolving threat intelligence into risk assessment activities and maintaining awareness of current vulnerability and adversary information sources.

3. Insider threats, internal controls, and auditing

   Discussion of internal control practices, access oversight, workforce supervision, audit review, and policy support related to insider risk management.

4. Resources

   A list of external reference sources and threat-intelligence tools cited for further review.