The Health Insurance Portability and Accountability Act (HIPAA) requires covered entities, such as healthcare providers and health plans, to implement administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of protected health information (PHI). To comply with these requirements, organizations must perform regular risk analyses and implement risk management plans to identify and mitigate risks to PHI. This webinar provides a comprehensive guide on HIPAA risk analysis and risk management (RA-RM) to help organizations protect their PHI and meet HIPAA compliance requirements. The webinar explains the key steps involved in performing a HIPAA RA-RM, from identifying potential risks and vulnerabilities to implementing risk mitigation measures and monitoring ongoing risk management activities. The webinar covers the following topics: Overview of HIPAA RA-RM requirements Identifying risks and vulnerabilities Evaluating the likelihood and impact of risks Developing and implementing risk mitigation measures Monitoring and reporting By the end of the webinar, participants will have a thorough understanding of HIPAA RA-RM and the steps involved in performing a HIPAA risk analysis. They will be equipped with the knowledge and skills required to identify and manage risks to PHI, pass an OCR audit, and ensure the privacy and security of PHI in their organizations. Overall, the webinar provides valuable information and practical guidance on HIPAA RA-RM to help organizations achieve and maintain HIPAA compliance and protect the privacy and security of PHI. By mastering the HIPAA RA-RM process, organizations can safeguard their well-being and minimize the risk of PHI breaches and HIPAA violations. Register, https://conferencepanel.com/conference/nist-ocr-hipaa-risk-analysis-risk-management-explained-step-by-step

1. PRESENTED BY
PAUL R. HALES, J.D.
1
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC
Register Now

2. PAUL R. HALES
ATTORNEY AT LAW
Health Information – HIPAA
Protecting Patient Privacy is Our Job®
Legal Education – Not Legal Advice
AttorneyHales.com @hipaaetool 314-534-3534
PaulHales@AttorneyHales.com
HIPAA Risk Analysis & Risk Management
2
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

3. HIPAA Risk Analysis & Risk Management
What Are We Going to Cover?
How to do HIPAA RA-RM – Preview – NIST/OCR Guidance
It’s just a 3 Act Play!
National Crisis – Failure to do HIPAA RA-RM – OCR Audit
NIST/OCR HIPAA Risk Analysis & Risk Management
Risk Analysis – Identify Risk and Level of Risk
Affecting All PHI – All Locations – Every Year
Risk Management – Reduce Risks to Reasonable & Appropriate Level
How to do NIST/OCR RA-RM in 3 Acts – Step-by-Step
3
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

4. HIPAA Risk Analysis & Risk Management
How to do HIPAA RA-RM – Preview – NIST/OCR Guidance
HIPAA Rules – Easy to Follow
Step-by-Step
When You Know the Steps
No RA-RM Steps in the HIPAA Rules!
NIST/ OCR Guidance
4
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

5. It’s just –
A 3 Act Play
Act 1 – Setup
Risk Analysis
1. Assemble Information
• PHI Locations in your Information System
• Workforce – Business Associates
• Identify Threats, Vulnerabilities and Risks
2. Assess Level of Risks
HIPAA Risk Analysis & Risk Management
How to do NIST/OCR RA-RM Step-by-Step
5
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

6. Determining Level of Risk – NIST Risk Management Procedures
3 Things determine Level of Risk
1.Impact – First consider the degree of Impact (very high, high, medium,
low, very low) caused by a Risk if a Threat triggered a Vulnerability
2.Likelihood – Next, consider the Likelihood that a Threat might occur
(very low, low, medium, high, very high) to trigger a Vulnerability and
cause a Risk
3.Controls – Finally consider effectiveness of Controls in place to reduce
the Vulnerability in an Information System
6
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC
HIPAA Risk Analysis & Risk Management
How to do NIST/OCR RA-RM Step-by-Step

7. It’s just –
A 3 Act Play
Act 1 – Setup
Risk Analysis
1. Assemble Information
• PHI Locations in your Information System
• Workforce – Business Associates
• Identify Threats, Vulnerabilities and Risks
2. Assess Level of Risks
HIPAA Risk Analysis & Risk Management
How to do NIST/OCR RA-RM Step-by-Step
7
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

8. It’s just –
A 3 Act Play
Act 2 – Confrontation
Risk Management Actions
Reduce Risks to Reasonable and Appropriate Level
Act 3 – Resolution
Risk Management Program
Active – Documented – In Place
HIPAA Risk Analysis & Risk Management
How to do HIPAA RA-RM – Preview – NIST/OCR Guidance
8
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

9. HIPAA Risk Analysis & Risk Management
How to do HIPAA RA-RM – Preview – NIST/OCR Guidance
HIPAA Rules – Easy to Follow
Step-by-Step
When You Know the Steps
No RA-RM Steps in the HIPAA Rules!
NIST/ OCR Guidance
9
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

10. HIPAA Risk Analysis & Risk Management
10
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC
Concluding Discussion, Questions, Comments
It’s Your Turn
Questions, Comments, Suggestions

11. HIPAA Risk Analysis & Risk Management
In Conclusion, we have Reviewed
How to do HIPAA RA-RM – Preview – NIST/OCR Guidance
It’s just a 3 Act Play!
National Crisis – Failure to do HIPAA RA-RM – OCR Audit
NIST/OCR HIPAA Risk Analysis & Risk Management
Risk Analysis – Identify Risk and Level of Risk
Affecting All PHI – All Locations – Every Year
Risk Management – Reduce Risks to Reasonable & Appropriate Level
How to do NIST/OCR RA-RM in 3 Acts – Step-by-Step
11
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC

12. HIPAA Risk Analysis & Risk Management
Thank You
Paul Hales, J. D.
PaulHales@AttorneyHales.com
314-534-3534
12
www.thehipaaetool.com Protecting Patient Privacy is our Job® © 2022 ET&C Group LLC
Register Now