The HIT Policy Committee’s Privacy and Security Tiger Team is considering methods other than attestation to call greater attention to the importance of risk assessments in HIPAA Security Rule requirements in HITECH Stage 3, reports GovInfoSecurity. Tiger Team Chair Deven McGraw says many healthcare providers are falling short on conducting timely risk assessments, noting that based on HIPAA audits the risk assessment requirement “is still not being met.” Meanwhile, A HealthITSecurity report questions where fine money resulting from HIPAA security audits is going.
Full Story