HIPAA Business Associate
HIPAA Business Associates, in general terms, are companies or other organizations who contract with HIPAA “Covered Entities” (Health payers, health providers and clearinghouses) and create, use, transmit or maintain confidential patient information (Protected Health Information or PHI). Beginning in 2013, HIPAA Business Associates are themselves regulated by the HIPAA regulations and are subject to both civil and criminal penalties for violations of the rules.
Eagle works with clients in healthcare and healthcare business associates to ensure HIPAA Security compliance. We provide a set of HIPAA Policy Templates for a variety of business associate types including Cloud Vendors, Third Party Administrators, and Information Technology companies.
Telework Security: Securing Home and Remote Workers
Telework Security: Securing Home and Remote Workers It goes by many names: Telework. Telecommute. Work from home. Remote work. According to recently released data from the US Census, 5.2% of Americans – 8 million people – worked from home in 2017. Home workers... Read More
SaaS Providers can reduce HITRUST certification costs with HITRUST Inheritance Program
SaaS providers can reduce HITRUST certification costs with HITRUST Inheritance Program Vendors who use the Software as a service (SaaS) distribution model have enjoyed considerable success in the healthcare marketplace. A challenge that they face is increased... Read More
Infected by your Computer Company
Last week, two Wisconsin companies that provide an online service to dental offices, Digital Dental Record and PerCSoft, told 400 dental office customers of a ransomware attack. The files on the computer networks of the dental offices were scrambled in a ransomware... Read More
Sell More to Hospitals with a HITRUST Certification
The Provider Third Party Risk Management Council, made of a consortium of leading hospitals, introduced a new approach to third-party risk management. How can you better serve them? The solution is simple – any vendor of a certain size who wishes to do business with one the member hospitals must successfully complete – and annually maintain — a certification using the HITRUST CSF. Member hospitals will accept a HITRUST certification as evidence of a robust security program. No questionnaires or further dialog is necessary.
Read More