SlideShare a Scribd company logo

HIPAA Topology

Created by Jason P. Rusch

1 of 1
Download to read offline
Health Insurance Portability & Accountability Act
4 PROVISIONS
TRANSACTIONS & CODES
Administrative Physical Technical
PRIVACY RULE SECURITY RULE IDENTIFIERS
(04)(03)(02)(01)
Basic Principle. A major purpose
of the Privacy Rule is to define
and limit the circumstances in
which an individual’s protected
heath information may be used or
disclosed by covered entities.
Business associate contracts
164.308(b)(1) R1
Evaluation
164.308(a)(8) R
Security awareness and training
164.308(a)(5) A4
Workforce security
164.308(a)(3) A3
Assigned security responsibility
164.308(a)(2) R
Contingency plan
164.308(a)(7) R3/A2
Security management process
164.308(a)(1) R4
Information access management
164.308(a)(4) R1/A2
Security incident procedures
164.308(a)(6) R1
Transmission security
164.312(e)(1) A2
Person entity authentication
164.312(d) R
Access control
164.312(a)(1) R2/A2
Workstation security
164.310(c)(1) R
Workstation use
164.310(b)(1) R
Integrity
164.312(c)(1) A1
Facility access controls
164.310(a)(1) A4
Device and media controls
164.310(d)(1) R2/A2
Audit controls
164.312(b) R
Personal information such as
SSN, name, address, medical
record number, device.
Biometric information, internet
IP, email address, photo,
medical insurance ect
HIPAA requires every provider who does
business electronically to use the same
health care transactions, code sets, and
identifiers. HIPAA has identified TEN
standard transactions for Electronic Data
Interchange (EDI)
Authored by; Jason P. Rusch - CISSP, CISM, CISA | www.infosec-rusch.com | jason@infosec-rusch.com
3 STANDARD GROUPS
18 Standards
12 Required - 6 Addressable
36 Implementation
Specifications
14 Required / 22 Addressable
Ad

Recommended

OHS Management System Presentation by TCB
OHS Management System Presentation by TCB OHS Management System Presentation by TCB
OHS Management System Presentation by TCB Ray Madhusudan
 
OHS Management System Presentation by TCB
OHS Management System Presentation by TCBOHS Management System Presentation by TCB
OHS Management System Presentation by TCBRay Madhusudan
 
OHS Mgt.System Awareness Presentation by TCB
OHS Mgt.System Awareness Presentation by TCBOHS Mgt.System Awareness Presentation by TCB
OHS Mgt.System Awareness Presentation by TCBRay Madhusudan
 
GHS Employee Training by Hector F. Hernandez
GHS Employee Training by Hector F. HernandezGHS Employee Training by Hector F. Hernandez
GHS Employee Training by Hector F. HernandezHector F. Hernandez
 
Conduct risk beyond the rulebook bovill briefing march 2014
Conduct risk   beyond the rulebook bovill briefing march 2014Conduct risk   beyond the rulebook bovill briefing march 2014
Conduct risk beyond the rulebook bovill briefing march 2014Bovill
 
PECB Webinar in Spanish: Principios de Gestión de Riesgo basados en ISO 31000
PECB Webinar in Spanish: Principios de Gestión de Riesgo basados en ISO 31000PECB Webinar in Spanish: Principios de Gestión de Riesgo basados en ISO 31000
PECB Webinar in Spanish: Principios de Gestión de Riesgo basados en ISO 31000PECB
 
Comparative of risk analysis methodologies
Comparative of risk analysis methodologiesComparative of risk analysis methodologies
Comparative of risk analysis methodologiesRamiro Cid
 

More Related Content

Similar to HIPAA Topology

Altis Webinar: Pragmatic Data Governance with Azure Data Catalogue
Altis Webinar: Pragmatic Data Governance with Azure Data CatalogueAltis Webinar: Pragmatic Data Governance with Azure Data Catalogue
Altis Webinar: Pragmatic Data Governance with Azure Data CatalogueAltis Consulting
 
OH&S MS presentation by TCB
OH&S MS presentation by TCBOH&S MS presentation by TCB
OH&S MS presentation by TCBRay Madhusudan
 
OH&S MS presentation by TCB
OH&S MS presentation by TCBOH&S MS presentation by TCB
OH&S MS presentation by TCBRay Madhusudan
 
Hipaa checklist - information security
Hipaa checklist - information securityHipaa checklist - information security
Hipaa checklist - information securityVijay Sekar
 
CIP IT Governance 5.0 Solution Guide for ArcSight Logger
CIP IT Governance 5.0 Solution Guide for ArcSight LoggerCIP IT Governance 5.0 Solution Guide for ArcSight Logger
CIP IT Governance 5.0 Solution Guide for ArcSight Loggerprotect724rkeer
 

Similar to HIPAA Topology (7)

Thesis MSC
Thesis MSCThesis MSC
Thesis MSC
 
Altis Webinar: Pragmatic Data Governance with Azure Data Catalogue
Altis Webinar: Pragmatic Data Governance with Azure Data CatalogueAltis Webinar: Pragmatic Data Governance with Azure Data Catalogue
Altis Webinar: Pragmatic Data Governance with Azure Data Catalogue
 
OH&S MS presentation by TCB
OH&S MS presentation by TCBOH&S MS presentation by TCB
OH&S MS presentation by TCB
 
OH&S MS presentation by TCB
OH&S MS presentation by TCBOH&S MS presentation by TCB
OH&S MS presentation by TCB
 
Pma salehuddin technology and innovation management
Pma salehuddin  technology and innovation managementPma salehuddin  technology and innovation management
Pma salehuddin technology and innovation management
 
Hipaa checklist - information security
Hipaa checklist - information securityHipaa checklist - information security
Hipaa checklist - information security
 
CIP IT Governance 5.0 Solution Guide for ArcSight Logger
CIP IT Governance 5.0 Solution Guide for ArcSight LoggerCIP IT Governance 5.0 Solution Guide for ArcSight Logger
CIP IT Governance 5.0 Solution Guide for ArcSight Logger
 

More from Jason Rusch - CISSP CGEIT CISM CISA GNSA

More from Jason Rusch - CISSP CGEIT CISM CISA GNSA (20)

NIST sp800 53-v4 Topology
NIST sp800 53-v4 TopologyNIST sp800 53-v4 Topology
NIST sp800 53-v4 Topology
 
CSA v4 Topology
CSA v4 TopologyCSA v4 Topology
CSA v4 Topology
 
ISO.IEC 27001 27002-2013
ISO.IEC 27001 27002-2013ISO.IEC 27001 27002-2013
ISO.IEC 27001 27002-2013
 
ISO.IEC 27000 Series Map
ISO.IEC 27000 Series MapISO.IEC 27000 Series Map
ISO.IEC 27000 Series Map
 
Cobit v5 High Level Controls Topology
Cobit v5 High Level Controls TopologyCobit v5 High Level Controls Topology
Cobit v5 High Level Controls Topology
 
Cobit & ISO 27002 Governance Topology
Cobit & ISO 27002 Governance TopologyCobit & ISO 27002 Governance Topology
Cobit & ISO 27002 Governance Topology
 
GLBA Topology
GLBA TopologyGLBA Topology
GLBA Topology
 
HIPAA Topology
HIPAA TopologyHIPAA Topology
HIPAA Topology
 
ISO.IEC_27001-27002-2013 Topology
ISO.IEC_27001-27002-2013 TopologyISO.IEC_27001-27002-2013 Topology
ISO.IEC_27001-27002-2013 Topology
 
PCI-DSS DESV Topology
PCI-DSS DESV TopologyPCI-DSS DESV Topology
PCI-DSS DESV Topology
 
DATA PROTECTION LAWS OF THE WORLD
DATA PROTECTION LAWS OF THE WORLDDATA PROTECTION LAWS OF THE WORLD
DATA PROTECTION LAWS OF THE WORLD
 
Common Security Framework Summary
Common Security Framework SummaryCommon Security Framework Summary
Common Security Framework Summary
 
Information_Governance_Risk_Compliance_Frameworks (v5)
Information_Governance_Risk_Compliance_Frameworks (v5)Information_Governance_Risk_Compliance_Frameworks (v5)
Information_Governance_Risk_Compliance_Frameworks (v5)
 
SOX Titles Topology
SOX Titles TopologySOX Titles Topology
SOX Titles Topology
 
ITIL v3 Topology
ITIL v3 TopologyITIL v3 Topology
ITIL v3 Topology
 
HITRUST CSF Topology
HITRUST CSF TopologyHITRUST CSF Topology
HITRUST CSF Topology
 
GLBA Topology
GLBA TopologyGLBA Topology
GLBA Topology
 
COSO ERM Topology
COSO ERM TopologyCOSO ERM Topology
COSO ERM Topology
 
Octave Topology
Octave TopologyOctave Topology
Octave Topology
 
FFIEC I.T. Booklets Topology
FFIEC I.T. Booklets TopologyFFIEC I.T. Booklets Topology
FFIEC I.T. Booklets Topology
 

Recently uploaded

Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...
Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...
Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...akashdashjsr99
 
sara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdf
sara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdfsara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdf
sara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdfد حاتم البيطار
 
dr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdf
dr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdfdr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdf
dr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdfد حاتم البيطار
 
CRO Audit & Monitoring Quality Perspectives.pdf
CRO Audit & Monitoring Quality Perspectives.pdfCRO Audit & Monitoring Quality Perspectives.pdf
CRO Audit & Monitoring Quality Perspectives.pdfDr Prashant Bodhe
 
Advanced Cardiac Disease | VITAS Healthcare
Advanced Cardiac Disease | VITAS HealthcareAdvanced Cardiac Disease | VITAS Healthcare
Advanced Cardiac Disease | VITAS HealthcareVITASAuthor
 
Breast cancer awareness by Dr. Dodul Mondal
Breast cancer awareness by Dr. Dodul MondalBreast cancer awareness by Dr. Dodul Mondal
Breast cancer awareness by Dr. Dodul MondalDr Dodul Mondal
 
Vitamin C Face wash Brands in India - Harriet Healthcare
Vitamin C Face wash Brands in India - Harriet HealthcareVitamin C Face wash Brands in India - Harriet Healthcare
Vitamin C Face wash Brands in India - Harriet Healthcaredehawebhopers
 
'Quick Wellness,' your shortcut to a healthier, happier you!
'Quick Wellness,' your shortcut to a healthier, happier you!'Quick Wellness,' your shortcut to a healthier, happier you!
'Quick Wellness,' your shortcut to a healthier, happier you!akashdashjsr99
 
2024 Compliatric Webinar Series - Components of a Needs Assessment.pdf
2024 Compliatric Webinar Series - Components of a Needs Assessment.pdf2024 Compliatric Webinar Series - Components of a Needs Assessment.pdf
2024 Compliatric Webinar Series - Components of a Needs Assessment.pdfCompliatric Where Compliance Happens
 
orbital_pseudotumor presentation dhir hospital bhiwani.pptx
orbital_pseudotumor presentation dhir hospital bhiwani.pptxorbital_pseudotumor presentation dhir hospital bhiwani.pptx
orbital_pseudotumor presentation dhir hospital bhiwani.pptxdhbketan
 
Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...
Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...
Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...Dr. David Greene Arizona
 
悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证
悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证
悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证8cuw8kc0
 
Use of AI: Misinformation on Social Media
Use of AI: Misinformation on Social MediaUse of AI: Misinformation on Social Media
Use of AI: Misinformation on Social MediaIris Thiele Isip-Tan
 
APPENDICITIS...ppt...MSN -I...SlideShare....
APPENDICITIS...ppt...MSN -I...SlideShare....APPENDICITIS...ppt...MSN -I...SlideShare....
APPENDICITIS...ppt...MSN -I...SlideShare....Beena Vaza
 
RED EYE Public health Publication for IPC
RED EYE Public health Publication for IPCRED EYE Public health Publication for IPC
RED EYE Public health Publication for IPCStephenKigotho
 
Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...
Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...
Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...Rommel Luis III Israel
 
The Natural Formula That Supports Men’s Virility And Libido
The Natural Formula That Supports Men’s Virility And LibidoThe Natural Formula That Supports Men’s Virility And Libido
The Natural Formula That Supports Men’s Virility And LibidoZaheerJamal1
 
Health and nutrition presentation by Soham Patel.pptx
Health and nutrition presentation by Soham Patel.pptxHealth and nutrition presentation by Soham Patel.pptx
Health and nutrition presentation by Soham Patel.pptxsohampatel420738
 
intracranial pressure nursing care process
intracranial pressure nursing care processintracranial pressure nursing care process
intracranial pressure nursing care processHayatALAKOUM
 
A BIRD VIEW ON DUSHI & GARAVISHA......pdf
A BIRD VIEW ON DUSHI & GARAVISHA......pdfA BIRD VIEW ON DUSHI & GARAVISHA......pdf
A BIRD VIEW ON DUSHI & GARAVISHA......pdfMallamma Biradar
 

Recently uploaded (20)

Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...
Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...
Embark on a delicious journey to a healthier you with 'A Healthy Guide to Eat...
 
sara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdf
sara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdfsara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdf
sara atefد حاتم البيطار زويل اكاديميد حاتم البيطار.pdf
 
dr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdf
dr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdfdr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdf
dr heba allah abozeidد حاتم البيطار زويل اكاديمي.pdf
 
CRO Audit & Monitoring Quality Perspectives.pdf
CRO Audit & Monitoring Quality Perspectives.pdfCRO Audit & Monitoring Quality Perspectives.pdf
CRO Audit & Monitoring Quality Perspectives.pdf
 
Advanced Cardiac Disease | VITAS Healthcare
Advanced Cardiac Disease | VITAS HealthcareAdvanced Cardiac Disease | VITAS Healthcare
Advanced Cardiac Disease | VITAS Healthcare
 
Breast cancer awareness by Dr. Dodul Mondal
Breast cancer awareness by Dr. Dodul MondalBreast cancer awareness by Dr. Dodul Mondal
Breast cancer awareness by Dr. Dodul Mondal
 
Vitamin C Face wash Brands in India - Harriet Healthcare
Vitamin C Face wash Brands in India - Harriet HealthcareVitamin C Face wash Brands in India - Harriet Healthcare
Vitamin C Face wash Brands in India - Harriet Healthcare
 
'Quick Wellness,' your shortcut to a healthier, happier you!
'Quick Wellness,' your shortcut to a healthier, happier you!'Quick Wellness,' your shortcut to a healthier, happier you!
'Quick Wellness,' your shortcut to a healthier, happier you!
 
2024 Compliatric Webinar Series - Components of a Needs Assessment.pdf
2024 Compliatric Webinar Series - Components of a Needs Assessment.pdf2024 Compliatric Webinar Series - Components of a Needs Assessment.pdf
2024 Compliatric Webinar Series - Components of a Needs Assessment.pdf
 
orbital_pseudotumor presentation dhir hospital bhiwani.pptx
orbital_pseudotumor presentation dhir hospital bhiwani.pptxorbital_pseudotumor presentation dhir hospital bhiwani.pptx
orbital_pseudotumor presentation dhir hospital bhiwani.pptx
 
Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...
Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...
Alzheimer’s Disease, Dementia, and Stem Cell Therapy Insights from Dr. David ...
 
悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证
悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证
悉尼大学毕业证制作流Sydney毕业证文凭学历学位认证
 
Use of AI: Misinformation on Social Media
Use of AI: Misinformation on Social MediaUse of AI: Misinformation on Social Media
Use of AI: Misinformation on Social Media
 
APPENDICITIS...ppt...MSN -I...SlideShare....
APPENDICITIS...ppt...MSN -I...SlideShare....APPENDICITIS...ppt...MSN -I...SlideShare....
APPENDICITIS...ppt...MSN -I...SlideShare....
 
RED EYE Public health Publication for IPC
RED EYE Public health Publication for IPCRED EYE Public health Publication for IPC
RED EYE Public health Publication for IPC
 
Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...
Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...
Nursing Care of Patients with Life Threatening Conditions, High Acuity Situat...
 
The Natural Formula That Supports Men’s Virility And Libido
The Natural Formula That Supports Men’s Virility And LibidoThe Natural Formula That Supports Men’s Virility And Libido
The Natural Formula That Supports Men’s Virility And Libido
 
Health and nutrition presentation by Soham Patel.pptx
Health and nutrition presentation by Soham Patel.pptxHealth and nutrition presentation by Soham Patel.pptx
Health and nutrition presentation by Soham Patel.pptx
 
intracranial pressure nursing care process
intracranial pressure nursing care processintracranial pressure nursing care process
intracranial pressure nursing care process
 
A BIRD VIEW ON DUSHI & GARAVISHA......pdf
A BIRD VIEW ON DUSHI & GARAVISHA......pdfA BIRD VIEW ON DUSHI & GARAVISHA......pdf
A BIRD VIEW ON DUSHI & GARAVISHA......pdf
 

HIPAA Topology

  • 1. Health Insurance Portability & Accountability Act 4 PROVISIONS TRANSACTIONS & CODES Administrative Physical Technical PRIVACY RULE SECURITY RULE IDENTIFIERS (04)(03)(02)(01) Basic Principle. A major purpose of the Privacy Rule is to define and limit the circumstances in which an individual’s protected heath information may be used or disclosed by covered entities. Business associate contracts 164.308(b)(1) R1 Evaluation 164.308(a)(8) R Security awareness and training 164.308(a)(5) A4 Workforce security 164.308(a)(3) A3 Assigned security responsibility 164.308(a)(2) R Contingency plan 164.308(a)(7) R3/A2 Security management process 164.308(a)(1) R4 Information access management 164.308(a)(4) R1/A2 Security incident procedures 164.308(a)(6) R1 Transmission security 164.312(e)(1) A2 Person entity authentication 164.312(d) R Access control 164.312(a)(1) R2/A2 Workstation security 164.310(c)(1) R Workstation use 164.310(b)(1) R Integrity 164.312(c)(1) A1 Facility access controls 164.310(a)(1) A4 Device and media controls 164.310(d)(1) R2/A2 Audit controls 164.312(b) R Personal information such as SSN, name, address, medical record number, device. Biometric information, internet IP, email address, photo, medical insurance ect HIPAA requires every provider who does business electronically to use the same health care transactions, code sets, and identifiers. HIPAA has identified TEN standard transactions for Electronic Data Interchange (EDI) Authored by; Jason P. Rusch - CISSP, CISM, CISA | www.infosec-rusch.com | jason@infosec-rusch.com 3 STANDARD GROUPS 18 Standards 12 Required - 6 Addressable 36 Implementation Specifications 14 Required / 22 Addressable