HIPAA Risk Analysis Is Not Just an IT Task
When people hear HIPAA risk analysis, they often think of IT. They picture passwords, firewalls, software, servers, and cybersecurity tools. Those things matter. But HIPAA risk analysis is bigger than technology. It also includes people, daily workflows, communication habits, vendors, devices, and the way employees handle patient information. Under the HIPAA Security Rule, covered entities and business associates must assess risks to electronic protected health information (ePHI). This means [...]











