The Hipaa Program Reference Handbook

ISBN-13: 9780849322112 / Angielski / Twarda / 2004 / 436 str.

Laurie Kelly

Opis

Management and IT professionals in the healthcare arena face the fear of the unknown: they fear that their massive efforts to comply with HIPAA requirements may not be enough, because they still do not know how compliance will be tested and measured. No one has been able to clearly explain to them the ramifications of HIPAA. Until now.
The HIPAA Program Reference Handbook explains all aspects of HIPAA including system design, implementation, compliance, liability, transactions, security, and privacy, focusing on pragmatic action instead of theoretic approaches. The book is organized into five parts. The first discusses programs and processes, covering program design and implementation, a review of legislation, human dynamics, the roles of Chief Privacy and Chief Security Officers, and many other foundational issues.
The Handbook continues by analyzing product policy, technology, and process standards, and what entities need to do to reach compliance. It then focuses on HIPAA legal impacts, including liability associated with senior management and staff within an organization.
A section on transactions and interactions discusses the intricacies of the transaction types, standards, methods, and implementations required by HIPAA, covering the flow of payments and patient information among healthcare and service providers, payers, agencies, and other organizations. The book concludes with a discussion of security and privacy that analyzes human and machine requirements, interface issues, functions, and various aspects of technology required to meet HIPAA mandates.

Spis treści

PROGRAMS AND PROCESSESThe Roles and Responsibilities, Ross A. Leo, CISSP, CHS-IIIThe Final HIPAA Security Rule Is Here! Now What? Todd Fitzgerald, CISSP, CISAIncorporating HIPAA Security Requirements into an Enterprise Security Program, Brian T. Geffert, CISSP, CISASteps to an Effective Data Classification Program, Mary Brown, CISSP, CISASTANDARDS AND COMPLIANCEHIPAA Security and the ISO/IEC 17799, Uday O. Ali Pabrai, S+, CHSS, SCNAExecution of a Self-Directed Risk Assessment Methodology to Address HIPAA Data Security Requirements, Johnathan Coleman, CISSP, CISMTen Steps to Effective Web-Based Security Policy Development and Distribution, Todd Fitzgerald, CISSP, CISAECONOMICS, LEGALITY, AND LIABILITYHIPAA Privacy Rules Require Security Compliance, Steven B. MarkinLegalities and Planning: The Stake Is in the Ground, Ken M. Shaurette, CISSP, CISA, CISM, IAMTRANSACTION AND INTERACTIONSHIPAA from the Patient's Point of View, Oscar Boultinghouse, M.D.Interoperability and Business Continuity Involving HIPAA EDI Transactions, Mark LottThe Role of DHHS, CMS, OCR, and OHS, Todd Fitzgerald, CISSP, CISASECURITY, PRIVACY, AND CONTINUITYThe HIPAA Security Risk Analysis, Caroline Ramsey HamiltonHIPAA Security Compliance: What It Means for Developers, Vendors, and Purchasers, Keith Pasley, CISSPIssues and Considerations for Business Continuity Planning under HIPAA, Kevin C. MillerAPPENDICESA Part I: A HIPAA Glossary Part II: Consolidated HIPAA Administrative Simplification Final Rule Definitions Part III: Purpose and MaintenanceB HIPAA Security Rule Standards, Implementation Specifications,and NIST Resource Guide for Implementing HIPAAC Policy Examples D Guide to HIPAA Security Assessment Prepared by WorkSmart MD, A Meyer Technologies, Inc. Company

O autorze

Ross A. Leo