Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
HIPAA Breach Impact Updates from HIMSS 2014
Evaluating the Potential Impact of a HIPAA Security Breach in Your Risk Analysis HIMSS 2014 included multiple presentations and updates regarding breach risk. Attorney...
Audits and the Meaningful Use Risk Analysis – Update from HIMSS 2014
Several officials from CMS spoke at HIMSS 2014 in Orlando regarding meaningful use audits. Approximately 5% of both physician and hospital providers are being audited,...
Top 20 Security Controls Updated, and “Compliance vs. Security”
“Top 20 Critical Security Controls” began in 2008 as an effort by U.S. and international agencies, including our own NSA, which has been the subject of so much media...
CFO Indicted for Fraudulent Statements in Meaningful Use Attestation
Eagle Consulting, Inc. has worked with healthcare providers who have failed meaningful use audits in the last two years. In each of these cases, the providers contacted...
OIG 2014 Work Plan Highlights, Part 3: EHR Security Audits
Covered entities have been complying with the HIPAA Security Rule since 2005, with the HHS’ Office for Civil Rights (OCR) as the main enforcer starting in 2009. ...
OIG 2014 Work Plan Highlights, Part 2: Biomedical Equipment Security
One item in the OIG 2014 Work Plan is to examine the controls over networked medical devices. That’s right. Yet another government entity, the OIG, plans to scrutinize...
OIG 2014 Work Plan Highlights, Part 1: Secure ePHI and portable devices
OIG Work Plan Highlights, Privacy and Security Measures – Part 1 The U.S. Department of Health and Human Services (HHS) Office of Inspector General (OIG) Work Plan for...
Latest HIPAA News from the OCR
There has been quite a bit of activity from the HHS Office of Civil Rights (OCR) related to health information privacy. Consumers and medical providers should take note...
OCR to OACBDD Tech Alliance – Key Take Aways
Two representatives from HHS Office of Civil Rights (OCR) presented on February 19, 2014 to about 70 members of the Ohio Association of County Boards of Developmental...
Elements of an Effective Compliance Program
Wanda Hardy and Jeffrey Dunifon, both of the Office of Civil Rights Region 5, yesterday presented to the OACBDD Tech Alliance yesterday at the Delaware County Board...
OCR Presents to Ohio Developmental Disability Boards
OCR Investigators Wandah Hardy and Jeffrey Dunifon, both from Office of Civil Rights Region 5, presented today to approximately 70 representatives from Ohio...
Linksys Routers being attacked by Worm “The Moon”
Medical practices and other healthcare organizations who use consumer-grade networking equipment made by Linksys should take immediate steps to mitigate attacks that...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation