Description:

This course will cover the proper methodologies for conducting a HIPAA Risk Assessment based on the formula used by Federal auditors and via the guidelines of the NIST (National Institute of Standard for Technologies), including the new Notice of Proposed Rulemaking soon to be finalized 

The course will also include policy templates written based on the findings of the “mock” risk assessment.

The course will also cover the most important aspects to be aware of in terms of the Federal auditing process as well as the new risks regarding patients suing for wrongful disclosures.

Areas Covered:-

• Updates for 2026 (NPRM’s)
• How to answer questions specific to the HIPAA Security Rule for different entities (i.e., medical practices, billing companies, software companies, managed IT service providers, insurance plans, etc)
• Policies and Procedures (how to write – with templates)
• Risks
• Business associates and the increased burden

Why Should You Attend:-

Have you done your HIPAA HITECH Security Risk Assessment?
Is it current? 
Do you know a risk assessment is the first thing the OCR will ask for in an audit or in the event of a breach?  
Is your risk assessment adequate?
 
Do you have written policies in place for all 18 Standards and 44 Implementation Specifications of the HIPAA Security Rule (even ones that don’t apply) – do you know this is required per the new Notice of Proposed Rulemaking soon to be finalized?
 
I will show you how to conduct a PROPER risk assessment by going through all current HIPAA Security Rule Standards along with the new “soon to be finalized” updates. 
I will instruct the listeners on how to write proper policies and procedures which are to be based upon the findings of the risk assessment and how to word the policies to satisfy the OCR or potential client requests (for business associates).

Who Should Attend:-

• Practice managers
• Any business associates who work with medical practices or hospitals (i.e. billing companies, transcription companies, IT companies, answering services, home health, coders, attorneys, etc)
• MD’s and other medical professionals.