Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
100 Days of HIPAA Enforcement under President Trump
It hasn't been widely publicized, but President Trump's administration brought five HIPAA enforcement actions, totaling $11,631,000, during his first 100 days in...
Security Risk Analysis deadline under ACI is 12/31/2017
The Security Risk Analysis (SRA) remains a requirement for the new Advancing Care Information (ACI) category of MIPS. A change enacted this year requires that the SRA be complete by 12/31/2017 under ACI, the Medicaid Meaningful Use program for physicians, and Hospital Meaningful Use programs. Practices who need outside help are advised to schedule their early to ensure that it is completed on time, and to avoid
Security Risk Analysis: Doctors believe EHR outages harm patients
According to a recent survey, physicians believe that EHR downtime harms patients. This is supported by the the Office of the National Coordinator of Health Information Technology (ONC), which states that medication errors and other impacts can occur. An effective HIPAA Security Risk Analysis (SRA) will
Health Care Direction under President Trump
While most of the political attention has focused on the GOP and Trump administration’s efforts to repeal Obamacare, aging Baby Boomers continue to challenge the finances of Medicare and the entire U.S. Federal budget. After the recent passage of an Obamacare repeal bill in the House, it is likely that political attention will remain on Obamacare repeal efforts, leaving recently enacted programs affecting Medicare, MACRA and MIPS, intact. It is possible that practices who maximize their performance under MIPS could earn a big payday, as high as
Ransomware – First Person Account
An Eagle Consulting Partners client, a 10 physician practice, shared their ransomware story. In the words of the system administrator: It was about 6PM on a Wednesday...
HHS issues Guidance regarding HIPAA and Cloud Computing
Healthcare organizations are increasingly using cloud computing vendors for electronic records, billing and revenue cycle management, file sharing, backup, and a wide variety of other functions — and HHS Office for Civil Rights (OCR) has released important new guidance for these companies.
Quality Payment Programs, the final rule
The Quality Payment Program final rule has been released. What payment adjustments will physicians see in the upcoming years? How quickly will the new payment methodologies be implemented?
The QRUR and MIPS
The 2015 QRUR have been released. Practices can download them and learn about their potential payment adjustments in 2017. They can also begin to understand how to perform well in MIPS.
Preventing and Mitigating Ransomware Attacks
Recently, entire hospital networks have been shut down for time periods between 3 days and 3 weeks due to ransomware attacks. What can be done? Fortunately, there are established best practices which can prevent one of these attacks in the first place, or reduce the impact if a network is infected. We have some advice for you.
Meaningful Use in 2016 and 2017
Meaningful Use is still on for 2016 and 2017. Learn what Acting Administrator has said about Meaningful Use and the MACRA implementation.
2016: Hospitals targeted with Ransomware, patients harmed, losses incurred
Ransomware attacks are rampant throughout the healthcare industry, affecting a high percentage of organizations.
After a healthcare provider becomes a victim of ransomware, the response is typical – these organizations recognize that attacks could occur again, with impacts even more severe, and invest both in safeguards to prevent future attacks and protections to mitigate the impact should they occur.
Locky Ransomware Targets Healthcare organizations
Research shows that a massive spam campaign with “locky ransomware” has been targeting healthcare organizations. We review malware and countermeasures.
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation