Enable HIPAA Compliance with

Complimentary! HIPAA, HITECH and HITRUST Exec Brief – an exec brief, 29 minutes, fact-based, fast-paced!
Examine application of cybersecurity frameworks such as NIST CSF and the HITRUST CSF to address HIPAA and HITECH mandates.
Complimentary access to world-class HIPAA and cybersecurity training and certification programs.
Knowledge transfer throughout the HIPAA, HITECH, and HITRUST engagement.
Easy & immediate access to the ecfirst chief executive to address any requirements.
Unconditional guarantee of your complete satisfaction!

1
HIPAA Methodology
2
HIPAA Privacy Rule
3
HITECH Breach

World-class Signature
HIPAA Methodology

CMS, MIPS, HIPAA

From CMS Meaningful Use, to MIPS Quality Measures, to critical HIPAA Security Rule-mandated Risk Assessments, ecfirst can ease your efforts at staying a top of compliance requirements. Discuss managed HIPAA compliance with ecfirst.

HIPAA Privacy Rule

Establishes federal standards to safeguard the privacy of personal health information.
Gives patients an array of rights with respect to their medical information.
Provides the foundation for the HIPAA Security Rule.

HITECH Breach

Breaches must be reported to OCR.
A breach is treated as discovered on first day the breach is known to the covered entity or business associate.

HIPAA Security Rule

Emphasizes confidentiality, integrity, and availability of all electronic Protected Health Information (ePHI).
Establishes national standards to protect individuals’ ePHI that is created, received, used, or maintained by an organization.
Requires appropriate safeguards to ensure the confidentiality, integrity, and security of ePHI.

Training & Certification

Step through all major sections of HIPAA Final Rule.
Examine the HIPAA Privacy and Security Rules; HIPAA Transactions Code Sets and Identifiers.

Evaluate U.S. state cybersecurity mandates, including California, New York, Texas and others.
Examine ISO 27001 and NIST standards.
Recognize key concepts to comply with the European Union (EU) General Data Protection Regulation (GDPR).

Examine and build practical cybersecurity program.
Step through core components of an incident response plan.
Review key policies in the areas of risk assessment, mobile devices, cloud computing, encryption, and more.

Managed HIPAA Compliance

Industry best practice is to perform HIPAA security risk assessments annually. HIPAA assessment is a requirement.
Organizations must include a comprehensive technical vulnerability assessment within the scope of the risk assessment.
Talk to ecfirst about the Managed Cybersecurity Services Program (MCSP) that addresses risk analysis, policy development, training, on-demand consulting to remediate gaps, and more.

HIPAA Security Risk Assessment

Organizations such as hospitals, health systems, physician practices, payers, dentists, as well as business associates must conduct a comprehensive risk analysis exercise to meet HIPAA mandates, including HITECH Meaningful Use requirements. Security standards such as ISO 27001 and NIST guidelines require a thorough risk analysis.

Cyber Assessment

A key requirement of compliance mandates and security standards such as ISO 27001, HIPAA, PCI DSS, and others is that organizations must conduct a comprehensive and thorough assessment of the potential risks and vulnerabilities to the Confidentiality, Integrity, and Availability (CIA) of all sensitive, confidential information. These mandates require organizations to complete a comprehensive and thorough cybersecurity assessment on a regular schedule.

HITRUST Common Security Framework (CSF) is an industry standard for healthcare organizations to protect PHI and comply with HIPAA Privacy and Security Rules. ecfirst is a HITRUST authorized CSF Assessor and helps you through the journey of certification, including Self-Assessment, Validation, & Certification.

NIST CsF provides an overarching incident management-based approach to cybersecurity that is intended to apply broadly across all organizations, regardless of size, industry, or cybersecurity sophistication.

Trusted by the industry with proven methodology and results

18

Years of experience

25,000+

People trained & certified
by ecfirst

1,000+

Satisfied Customers

In the News

Controls Required for HITRUST Certification, HITRUST Advisory from Ali Pabrai.

Events

Cyber Immune Defense: HITRUST, Featured Presentation by Ali Pabrai at HIMSS Iowa Chapter 2018 conference, November 8, 2018 | Des Moines.

Thought Leadership

Ali Pabrai, MSEE, CISSP (ISSAP, ISSMP), CCSFP (HITRUST) is the chief executive of ecfirst, an Inc. 500 business. He is a highly regarded information security and regulatory compliance expert.