Compliance Tips

Governance Report Cards = Better Compliance Budgeting

Just like other operational and clinical areas of a healthcare system, the right metrics can help you understand current state in your compliance and security strategy and help guide decisions for how your organization should allocate funding for health IT projects related to governance, risk, and compliance.

But, where to begin? Using a quarterly governance report card is an efficient way to gather data and see trending over time. Start with our top seven metrics to gather on your report card:

Read more...

PHI Hide and Seek – Hidden PHI Carries High Financial Risk

The technology storm of the past three decades has made access to electronic protected health information (ePHI) easier, which benefits patient care in an ever-fragmented delivery system, but is bad for information security. Protected health information (PHI) can be found in virtually every corner of a healthcare system, concealed in unlikely places. With each new technology, acquisition, or merger comes new vulnerabilities that may remain unseen until the right assessments are performed to uncover them.

Read more...

HIPAA IT Compliance Checklist

Struggling with staying on top of HIPAA? Our easy-to-use HIPAA IT compliance checklist will help you keep track of your administrative, technical and physical safeguards.

Read more...

Dreading the annual compliance training? There’s a better way.

Healthcare organizations simply cannot continue to rely on traditional training methods and call it day. Building a culture of compliance takes more than watching a video and checking a box. Your employees need to be engaged, to feel empowered, for a culture of compliance to thrive. And, there’s nothing wrong with having a little fun while you’re at it.

Read more...

How a Functional Compliance Program Can Protect PHI

Before the digitization of healthcare records, protected health information (PHI) was mainly stored on paper charts and records and in data centers. The value of personal information was low. Now, however, ePHI is extremely valuable, and attackers will find a way in. As we way in the industry, “it’s not a matter of if. It’s when.” Healthcare organizations fend off tens of thousands of attacks every day.

Read more...