Episode 103: What is a Security Risk Analysis, and Why Do I Need One?

Coffee with Coker

DeAnn Tucker and Roz Cordini join Mark Reiboldt to explain the need for a security risk analysis within healthcare organizations. Many organizations are missing one critical component when performing a security risk analysis. Learn what elements organizations usually miss and how to conduct a security risk analysis properly.

Podcast Information

Follow our feed in Apple Podcasts, Google Podcasts, Spotify, Audible, or your preferred podcast provider. Like what you hear? Leave a review!

We welcome all feedback from our listeners. Email us questions on any of the topics we discuss or questions about issues that interest you. You can also provide recommendations on matters for future episodes.

• Please email us: [e-mail]
• Connect with us on LinkedIn: Coker Group Company Page
• Follow us on Twitter: @cokergroup
• Follow us on Instagram: @cokergroup
• Follow us on Facebook: @cokerconsulting

Episode Synopsis

Did you know Health and Human Services requires an annual security risk analysis? If a breach of information occurs, OCR will request the last 2-3 years of security risk analyses to verify your organization has performed the analysis and taken steps to implement the remediation plan.

Aside from the requirement, performing a security risk analysis also safeguards electronic protected health information (ePHI) by identifying potential vulnerabilities before a criminal exploits them.

Click to listen to the episode.

Extras

• Security Rule 45 CFR 164.308
• Guidance on Risk Analysis Requirements under the HIPAA Security Rule
• 5 Mistakes Covered Entities and Business Associates Made During a Security Risk Analysis