Stay informed on hot topics in security, compliance, AI governance, and all things healthcare. Plus learn more about emerging trends, thought leadership insights, and news you should know.
No posts match “”.
Dawn Meglino, HIPAA Compliance Specialist
We’ve curated our weekly tips shared on LinkedIn every Tuesday into this monthly blog for your convenience. Let’s make a pact: we won’t only think of cybersecurity awareness in…
Read more →Dawn Meglino, HIPAA Compliance Specialist
We’ve curated our weekly tips shared on LinkedIn every Tuesday into this monthly blog for your convenience. Core NIST Guidance for Healthcare Govern & Manage Risk: Use NIST SP…
Read more →Michael J. Ducsak, Chief Information Security Officer
For years, many organizations viewed cybersecurity as an IT responsibility. IT managed the firewalls, installed antivirus software, patched computers, reset passwords, and…
Read more →Marco Maggio, Chief Revenue Officer
Every piece of technology has an expiration date. The organizations that struggle aren't the ones with aging technology. They're the ones that never planned for it. Windows 10 was…
Read more →Zandy McAllister, vCISO
Not every leadership success shows up on a dashboard. Goals are met, numbers improve, teams grow, and projects move across the finish line. But some of the most important wins are…
Read more →Marco Maggio, Chief Revenue Officer
October 2025 marked Microsoft's end of support for Windows 10. Since then, healthcare organizations have taken different paths. Some completed their migration to Windows 11…
Read more →Staying ahead of MIPS changes is essential for maintaining compliance, protecting reimbursement, and maximizing your practice performance. With the proposed 2027 MIPS updates…
Read more →Dawn Meglino, HIPAA Compliance Specialist
We’ve curated our weekly tips shared on LinkedIn every Tuesday into this monthly blog for your convenience. A breach is, generally, an impermissible use or disclosure under the…
Read more →Michael J. Ducsak, Chief Information Security Officer
Artificial intelligence is no longer a future initiative; it has become part of everyday business operations. Physicians and employees are using AI to summarize meetings, draft…
Read more →Zandy McAllister, vCISO
Ever Wonder Why One Tool Is Never Enough? Cybersecurity can quickly become overwhelming because the language around it is often technical and full of tools and acronyms. Even…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has officially released the 2027 Quality Payment Program (QPP) proposed rule. The 1,592-page proposed rule contains many…
Read more →Dawn Meglino, HIPAA Compliance Specialist
NOW is the time to finish the Disaster Recovery Plan. TODAY is the day to review policies and procedures that have been pushed to the side for the last two years. Before Q4 2026…
Read more →Sarrah Hakim, Director of Health Policy
This morning, the Centers for Medicare and Medicaid Services (CMS) released the 723-page 2027 Ambulatory Surgical Center Quality Reporting Program (ASCQR) Proposed Rule. This blog…
Read more →Dawn Meglino, HIPAA Compliance Specialist
We talk all the time about the same things: long, complex passwords, updating/patching systems and applications containing ePHI, enabling two-factor/multi-factor authentication…
Read more →Sarrah Hakim, Director of Health Policy
The deadline to begin your 180-day Promoting Interoperability (PI) performance period for 2026 MIPS is rapidly approaching. If you are planning to report PI and haven’t started…
Read more →Dawn Meglino, HIPAA Compliance Specialist
How about this one to grab you: HIPAA statistics in 2026 highlight that over 935 million individuals have had their Protected Health Information (PHI) compromised since 2009—over…
Read more →Sarrah Hakim, Director of Health Policy
The 2026 Quality Payment Program (QPP) Final Rule included many changes to the MIPS Promoting Interoperability (PI) category. One of these changes is an additional component to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
We all know how much our coworkers love HIPAA requirements, annual training(s) and constant (I hope!) reminders from management and the compliance team. We are also well aware of…
Read more →Christopher Pietras, vCISO
For years, antivirus software was the cornerstone of endpoint security, helping organizations identify and block known malicious files before they could compromise systems…
Read more →Dawn Meglino, HIPAA Compliance Specialist
You need me – oh yes you do! Every OCR breach investigation in 2026 cited the failure to conduct an accurate and thorough HIPAA Security Risk Analysis (SRA). It’s not good enough…
Read more →Dawn Meglino, HIPAA Compliance Specialist
We’ve all heard about the HIPAA Security Rule Notice of Proposed Rule Making (NPRM) submitted in December 2024. Fast forward, we were expecting some of the proposals to come into…
Read more →Dawn Meglino, HIPAA Compliance Specialist
For those of you who know me, you’ve heard me say probably more than once, we are all patients somewhere. And as patients we want to be treated with importance and feel confident…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) recently announced that they have identified certain counties in Hawaii and certain municipalities in the Commonwealth of the…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare & Medicaid Services (CMS) has opened the 2024 Doctors and Clinicians Preview Period, which runs from May 13, 2026, to June 11, 2026, at 8 pm ET. During…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Your Information Technology (IT) team needs to be one of your nearest and dearest comrades in securing the organization from all the scary and nasty threat actors trying to steal…
Read more →Jeff Stravers, vCIO
When you think about cyber resilience in healthcare, what comes to mind? Often, organizations focus on how they will prepare for, withstand, respond to, and recover from a…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Staff training goes without saying, but what does this look like in your organization? Would this be an annual PowerPoint for HIPAA training that has been presented year after…
Read more →Sarrah Hakim, Director of Health Policy
The registration window to report a MIPS Value Pathway (MVP) for the 2026 performance year opened on April 1 and will close on November 30, 2026, at 8 pm ET. If you are planning…
Read more →Zandy McAllister, vCISO
Many organizations look more resilient on paper than they are in practice. Cyber resilience now shows up in board meetings, insurance renewals, compliance reviews, and security…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Auditing active user accounts in all systems and applications containing ePHI for healthcare organizations is crucial in order to maintain data security and regulatory compliance…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Gastroenterology Care MVP for the 2026 performance year. Although MVP reporting is currently…
Read more →Dawn Meglino, HIPAA Compliance Specialist
General Compliance Program Guidance, or GCPG is a program created from Office of the Inspector General (OIG) and Health and Human Services (HHS). The GCPG is a reference guide for…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Advancing Rheumatology Patient Care MVP for the 2026 performance year. Although MVP reporting is…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Artificial Intelligence or AI Poisoning Attacks take two significant forms: Data Poisoning and Model Poisoning. Data Poisoning is classified into two categories: targeted data…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Adopting Best Practices and Promoting Patient Safety within Emergency Medicine MVP for the 2026…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Ever hear industry experts say “It’s not IF you have a cyber/ransomware attack, it’s WHEN.” No truer words have been spoken. Why do we run in the opposite direction from…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Quality Care in Mental Health and Substance Use Disorders MVP for the 2026 performance year. Although…
Read more →Dawn Meglino, HIPAA Compliance Specialist
OR, is it your organization that is not stepping up? Have you recently reviewed the security measures and password policies in place for systems and applications containing ePHI…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Surgical Care MVP for the 2026 performance year. Although MVP reporting is currently voluntary, CMS…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Is it having locks on all doors, or is it an alarm system and security cameras? When you think of security for your home and your personal possessions, do you assess the…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized many changes to the MIPS Promoting Interoperability (PI) category) for the 2026 performance year. One of these is…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The HIPAA Privacy Rule requires health plans and covered health care providers to develop and distribute a notice that provides a clear, user friendly explanation of individuals’…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has finalized the Podiatry MVP, which is available for reporting in the 2026 performance year. Although MVP reporting is…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Getting tired of opening emails or articles and reading about another cybersecurity attack on a healthcare organization? Afraid your business might be next? Then do something…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Rehabilitative Support for Musculoskeletal Care MVP for the 2026 performance year. Although MVP…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The following HIPAA Checklists (more to come!) are intended to serve as reminders and quick references. Additionally, these lists are HIPAA requirements and not to be ignored…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Improving Care for Lower Extremity Joint Repair MVP for the 2026 performance year. Although MVP…
Read more →Dawn Meglino, HIPAA Compliance Specialist
How many times have you heard from your compliance expert or IT team that you must conduct Disaster Recovery Plan (DRP) testing? And you think – are they nuts? On the contrary…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Quality Care for the Treatment of Ear, Nose, and Throat Disorders MVP for the 2026 performance year…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Why are we fighting or pushing back on HIPAA compliance? Are we talking about the pain/pleasure principle originated by Sigmund Freud, that human behavior is primarily driven by…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Complete Ophthalmologic Care MVP for the 2026 performance year. Although MVP reporting is currently…
Read more →Dawn Meglino, HIPAA Compliance Specialist
As you may be aware, the Notice of Proposed Rule Making (NPRM) for the HIPAA Security Rule was issued in December 2024. Public comment period closed in March 2025, allowing anyone…
Read more →Sarrah Hakim, Director of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized updates to the Dermatological Care MVP for the 2026 performance year. Although MVP reporting is currently voluntary…
Read more →Dawn Meglino, HIPAA Compliance Specialist
AI in healthcare utilizes machine learning, natural language processing, and computer vision to analyze complex medical data, enhancing diagnostic accuracy, personalizing…
Read more →Marco Maggio, Chief Revenue Officer
Healthcare compliance is often viewed as a regulatory burden or something organizations "have to do" rather than something that actively protects patients, staff, and business…
Read more →Sarrah Hakim, Director of Health Policy
Electronic Case Reporting (eCR) has been required under the MIPS Promoting Interoperability (PI) category since the beginning of performance year 2022. As we head into the fifth…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Remember when your mom said “don’t talk to strangers”? This goes way beyond that. Zero Trust Architecture is a security framework based on “never trust, always verify.” Not like…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Health Information Exchange or HIE is the secure electronic sharing of patient data between different healthcare providers and organizations (labs, hospitals, public health) to…
Read more →Marco Maggio, Chief Revenue Officer
Healthcare organizations are under more cyber pressure than ever before, and the consequences extend far beyond IT. Ransomware, phishing, and data breaches don't just disrupt…
Read more →Cyber insurance (or cyber liability insurance) protects businesses from financial losses due to cyberattacks, data breaches, and other security incidents by covering costs like…
Read more →Sarrah Hakim, Director of Health Policy
We’re here to help you start the new year strong. In this blog, we highlight important MIPS dates and action items. You can use the key action checklists provided throughout the…
Read more →Dawn Meglino, HIPAA Compliance Specialist
There is so much focus on security measures as they relate to computers: workstations, laptops, iPads, tablets, and servers, either physically onsite or virtual/cloud based. But…
Read more →Sarrah Hakim, Director of Health Policy
In this blog, we highlight important ASCQR dates and action items. You can use the key action checklists provided throughout the blog to stay on track during the 2026 performance…
Read more →Dawn Meglino, HIPAA Compliance Specialist
When is the best time to get your HIPAA House in order? Now! Step One: Review active users in all systems and applications containing ePHI (including Windows/Active Directory), to…
Read more →Sarrah Hakim, Director of Health Policy
All claims billed with DOS starting 1/1/2026 will reflect your MIPS payment adjustment. Your Medicare Part B physician services payments in 2026 will be adjusted based on your…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Whether you are looking to ramp up your knowledge of Cybersecurity with best practices for your organization’s networks, systems, computers and data safety, to becoming a…
Read more →Dawn Meglino, HIPAA Compliance Specialist
What does remote access mean to you in your organization? For most businesses today remote access is a necessity. Whether it’s a physician who needs to review medical records…
Read more →Sarrah Hakim, Director of Health Policy
The deadline to file for a 2025 MIPS hardship is rapidly approaching. The Centers for Medicare and Medicaid Services (CMS) requires 2025 MIPS hardship applications to be submitted…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Hard to believe that it’s almost 2026! And with that comes New Year resolutions and (hopefully) positive changes for your organization’s compliance posture. Some scenarios to…
Read more →Missed our live webinar, 2026 MIPS Final Rule Breakdown: Maximize Your Scores? Don’t worry – you can still access all the valuable insights on-demand! In this session, we provided…
Read more →Dawn Meglino, HIPAA Compliance Specialist
HHS OCR enforcement in 2025 heavily focused on HIPAA Security Rule violations especially ransomware, ePHI protection, Risk Analysis, access rights (patient records, reproductive…
Read more →Earlier this year, the Centers for Medicare and Medicaid Services (CMS) published the national statistics on 2023 Merit-based Incentive Payment System (MIPS) performance. 2023…
Read more →Dawn Meglino, HIPAA Compliance Specialist
When we look at risk in a healthcare environment it is defined as the likelihood of a threat exploiting a vulnerability. Think of a combination of factors that could lead to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Enough with the “I’ll get to that soon,…” thought process when it comes to HIPAA requirements and compliance regulations. Now more than ever, with cyber and ransomware attacks…
Read more →Sarrah Hakim, Director of Health Policy
On November 21, 2025, the Centers for Medicare and Medicaid Services (CMS) released the 1,657-page 2026 Ambulatory Surgical Center Quality Reporting (ASCQR) Program Final Rule…
Read more →Sarrah Hakim, Director of Health Policy
The registration window to report a MIPS Value Pathway (MVP) for the 2025 performance year will close on December 1, 2025, at 8 pm ET. If you are planning to report an MVP in…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Understanding and implementing HIPAA compliance steps is critical for every healthcare organization and their Business Associates. The HIPAA Privacy Rule mandates that…
Read more →Navigating the ever-changing world of healthcare is never easy, and when it comes to understanding and complying with the Merit-based Incentive Payment System (MIPS), the path…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Remote Access Trojan malware represents one of the most serious threats to healthcare organizations today. From the National Cybersecurity Alliance, also known as Stay Safe Online…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has released the 2026 Quality Payment Program (QPP) final rule. The 2,375-page final rule contains many changes that we…
Read more →Sarrah Hakim, Manager of Health Policy
The deadline to appeal 2024 MIPS scores and 2026 MIPS payment adjustments is rapidly approaching. The Centers for Medicare and Medicaid Services (CMS) refers to these appeals as…
Read more →Dawn Meglino, HIPAA Compliance Specialist
In the ever-evolving technology-driven world we live in, exciting advances are constantly being made from web-/cloud-based EMRs, telehealth software solutions, AI tools, portable…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has officially released the 2026 Quality Payment Program (QPP) final rule. The 2,375-page final rule contains many changes…
Read more →Dawn Meglino, HIPAA Compliance Specialist
TL;DR – Robust Security Practices: Use strong, unique passwords or passphrases with password managers Update all software immediately when patches are released Recognize red flags…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Here’s an idea: what if we stopped getting scared and freaked out by Cybersecurity threats and attacks? Remember when you were young, playing a game with your family or friends…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy and Sarrah Hakim, Manager of Health Policy
On October 21, 2025, the Centers for Medicare and Medicaid Services (CMS) announced that the hold on most Medicare claims will be lifted. In this blog, we discuss the latest…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has released 2026 MIPS payment adjustment information. These payment adjustments are tied to 2024 MIPS scores and will be…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy and Sarrah Hakim, Manager of Health Policy
On October 15, 2025, the Centers for Medicare and Medicaid Services (CMS) issued a statement on the continued hold of all fee schedule claims. You may have heard that CMS decided…
Read more →Dawn Meglino, HIPAA Compliance Specialist
NIST CSF 2.0 resources provide healthcare organizations with comprehensive guidance for improving cybersecurity programs. National Institute of Standards and Technology (NIST) is…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy and Sarrah Hakim, Manager of Health Policy
On October 1, 2025, we entered a federal government shutdown, and all signs currently point to this shutdown being prolonged. During a shutdown, discretionary spending is halted…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Cyberattacks come in many forms, from ransomware and phishing attacks to the theft of sensitive data and personal information of employees. Healthcare organizations need to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! As we approach Cybersecurity Awareness Month 2025, Dawn Meglino highlights valuable free resources from leading cybersecurity…
Read more →Sarrah Hakim, Manager of Health Policy
The deadline to begin your 90-day Improvement Activities (IA) performance period for 2025 MIPS is rapidly approaching. If you haven’t started your IA performance period yet, you…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! Healthcare organizations face more cyber attacks than any other industry—but why? In this comprehensive guide, we’ll explore why…
Read more →Sarrah Hakim, Manager of Health Policy
Anatomy IT (AIT) asks Centers for Medicare and Medicaid Services (CMS) to consider your experience with quality reporting in comments submitted on the 2026 ASC Quality Reporting…
Read more →Sarrah Hakim, Manager of Health Policy
Anatomy IT (AIT) asks Centers for Medicare and Medicaid Services (CMS) to consider your experience with quality reporting in comments submitted on the 2026 Quality Payment Program…
Read more →Welcome to this week’s HIPAA Tip Tuesday! Conducting a thorough HIPAA risk analysis is one of the most critical requirements for healthcare organizations, yet many practices…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! HIPAA violations continue to happen daily in healthcare organizations—often for the same preventable reasons. In this guide, Dawn Meglino…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! Cybersecurity isn’t just about IT policies or expensive systems—it’s about the daily choices each healthcare worker makes. In this guide…
Read more →Sarrah Hakim, Manager of Health Policy
The deadline to comment on the 2026 Quality Payment Program (QPP) proposed rule is approaching! If you would like an opportunity to share your feedback with CMS on MIPS reporting…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! As healthcare organizations grow, their compliance programs must scale accordingly. In this guide, Dawn Meglino explains how to build…
Read more →Sarrah Hakim, Manager of Health Policy
The 2026 Quality Payment Program (QPP) proposed rule includes several Requests for Information (RFIs), in which the Centers for Medicare and Medicaid Services (CMS) gathers…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! Mobile devices have become essential tools in healthcare, but they also represent significant security risks when not properly protected…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has proposed a Podiatry MVP, which would be available for reporting in the 2026 performance year. Although MVP reporting is…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! The National Institute of Standards and Technology (NIST) provides critical cybersecurity frameworks and guidelines that healthcare…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) is proposing updates to the Dermatological Care MVP for the 2026 performance year. Although MVP reporting is currently…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! This August, we’re celebrating National Ambulatory Surgery Center Month—a time to recognize the vital role ASCs play in delivering…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) recently announced that they have identified certain counties in California and Texas as qualifying for an automatic 2025 MIPS…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! While healthcare organizations aren’t required to follow NIST standards, they offer some of the best tools to counteract cyber threats…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare & Medicaid Services (CMS) reopened the 2023 Doctors and Clinicians Preview Period on July 23, 2025, for a 30-day window. It will close again on August 21…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! This article is designed to be shared with your entire staff—from front desk to clinical teams. Dawn Meglino explains why HIPAA…
Read more →Sarrah Hakim, Manager of Health Policy
This week, the Centers for Medicare and Medicaid Services (CMS) released the 913-page 2026 Ambulatory Surgical Center Quality Reporting Program (ASCQR) Proposed Rule. This blog…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! A risk management plan is a required component of HIPAA Security Rule compliance, yet many organizations struggle with where to start…
Read more →The Centers for Medicare and Medicaid Services (CMS) has officially released the 2026 Quality Payment Program (QPP) proposed rule. The 1,803-page proposed rule contained many…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! Understanding HIPAA terminology is fundamental to compliance. Dawn Meglino provides clear definitions of the most important HIPAA terms…
Read more →Sarrah Hakim, Manager of Health Policy
The deadline to begin your 180-day Promoting Interoperability (PI) performance period for 2025 MIPS is rapidly approaching. If you are planning to report PI and haven’t started…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! How prepared is your organization really? Dawn Meglino challenges healthcare leaders to assess whether their staff, physicians, and…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The deadline to submit your 2025 quarter 1 (Q1) OAS CAHPS data is rapidly approaching. The Centers for Medicare and Medicaid Services (CMS) requires 2025 Q1 OAS CAHPS data be…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! User access audits are essential for maintaining HIPAA compliance and preventing data breaches. Dawn Meglino explains why regular reviews…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare & Medicaid Services (CMS) is accepting proposals for new MIPS improvement activities (IAs), as well as updates to existing ones. Submissions received by…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! Summer offers healthcare organizations a strategic opportunity to tackle HIPAA compliance tasks that often get pushed aside during busier…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Disease Control and Prevention (CDC) recently announced a temporary pause in onboarding new healthcare organizations for electronic case reporting (eCR). The CDC…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Welcome to this week’s HIPAA Tip Tuesday! HIPAA denial takes many forms—from believing breaches won’t happen to you, to thinking your practice is too small to be targeted. Dawn…
Read more →Sarrah Hakim, Manager of Health Policy
On May 16, the Centers for Medicare & Medicaid Services (CMS) and the Assistant Secretary for Technology Policy/Office of the National Coordinator (ASTP/ONC) published the Health…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare & Medicaid Services (CMS) has opened the 2023 Doctors and Clinicians Preview Period, which runs from May 27, 2025, to June 25, 2025 at 8 pm ET. During…
Read more →Dawn Meglino, HIPAA Compliance Specialist
We discuss all the time the importance of password security measures, i.e., password length, restricting the reuse of the last several passwords, passphrases versus passwords or…
Read more →Dawn Meglino, HIPAA Compliance Specialist
To become “HIPAA smarter” organizations need to understand HIPAA rules, implement appropriate safeguards, and continuously monitor and adapt to ensure compliance. This includes…
Read more →Sarrah Hakim, Manager of Health Policy
The registration window to report a MIPS Value Pathway (MVP) for the 2025 performance year opened on April 1 and will close on December 1, 2025, at 8 pm ET. If you are planning to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Founded in 1987, the Federal Information Systems Security Educators Association, or FISSEA, now shortened to Federal Information Security Educators, is an organization run by and…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) has opened the 2025 MIPS hardship applications. The deadline to apply is December 31, 2025 at 8 pm ET. There are two…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The Health Sector Coordinating Council (HSCC) Cybersecurity Working Group (CWG) is an industry-led council of more than 400 healthcare organizations advising the government and…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has released additional guidance on how to fulfill the electronic case reporting (eCR) measure, which is required for the…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) issued an announcement (PDF) that it will be suspending the following improvement activities (IAs) for the 2025 performance…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Artificial Intelligence (AI) is technology that enables computers and machines to simulate human learning, comprehension, problem solving, decision making, creativity and…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) finalized the new Gastroenterology Care MVP in 2025. Although MVP reporting is currently voluntary, CMS has expressed the…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Remember when you were a kid and your schools conducted fire drills? Imagine if the drills were not tested or the procedures on the steps to be taken were not planned out. Now…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) introduced the Advancing Rheumatology Patient Care MVP in 2023, and it continues to be available for reporting in the 2025…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The Assistant Secretary for Technology Policy (ASTP) with the Office of the National Coordinator (ONC) released the 2025 SAFER Guides aiming to improve health systems’ adherence…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) introduced the Adopting Best Practices and Promoting Patient Safety within Emergency Medicine MVP in 2023, and it continues to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
When your organization suffers a HIPAA Breach affecting 500 individuals or more there are numerous steps that must be taken as soon as possible once the breach has been…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) introduced the Quality Care in Mental Health and Substance Use Disorders in 2024, and it continues to be available for…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The answer to the million dollar question?! A lot of changes came through in 2024: TL;DR – What Changed with HIPAA in 2024: Change Healthcare breach: 190M individuals affected…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Recognized Security Practices (RSPs) are defined as “the standards, guidelines, best practices, methodologies, procedures, and processes developed under section 272(c)(15) of…
Read more →Dawn Meglino, HIPAA Compliance Specialist
I would be the first to recommend when your organization is preparing its annual budget, the cost for the annual HIPAA Security Risk Analysis (SRA) by a certified HIPAA compliance…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) has extended the 2024 MIPS submission to April 14, 2025, at 8 pm ET. This is in response to the ongoing IV fluid shortage and…
Read more →Missed our live webinar, MIPS Improvement Activities Category: Elevate Patient Satisfaction & Boost Revenue? Don’t worry – you can still access all the valuable insights…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) introduced the Quality Care for the Treatment of Ear, Nose, and Throat Disorders MVP in 2024, and it continues to be available…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Healthcare security doesn’t have to drain your budget. Not everything costs a LOT of money when it comes to investing in your healthcare environment’s security. There are numerous…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The HIPAA Safe Harbor method is a critical process for healthcare organizations that need to use or share patient data while maintaining privacy compliance. The HIPAA Safe Harbor…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has finalized new MIPS Value Pathways (MVPs) that are relevant to specialties we serve. One of these is the Surgical Care MVP…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Smishing attacks are becoming one of the most dangerous threats to healthcare organizations and their employees. SMS phishing, or also known as smishing, is a type of cybercrime…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) introduced the Rehabilitative Support for Musculoskeletal Care MVP in 2024, and it continues to be available for reporting in…
Read more →Dawn Meglino, HIPAA Compliance Specialist
OCR HIPAA audits are underway and healthcare organizations need to understand what these reviews mean for their compliance programs. During a recent webinar ANATOMY IT presented…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) introduced the Improving Care for Lower Extremity Joint Repair MVP in 2023, and it continues to be available for reporting in…
Read more →Dawn Meglino, HIPAA Compliance Specialist
An important part of an effective Business Continuity Plan is identifying your organization’s mission-critical systems, prioritizing restoration, and conducting a Risk Analysis to…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has finalized new MIPS Value Pathways (MVPs) that are relevant to specialties we serve. One of these is the Dermatological…
Read more →In today's rapidly evolving healthcare landscape, community and critical access hospitals are navigating a perfect storm of challenges. You are tasked with delivering top-tier…
Read more →Dawn Meglino, HIPAA Compliance Specialist
In February, 2024 Centers for Medicare and Medicaid (CMS) came out with a Memorandum on Texting Patient Information and Orders. The memorandum was specific for hospitals and CAHs…
Read more →Dawn Meglino, HIPAA Compliance Specialist
If you were not aware of this the Federal Trade Commission (FTC) is dug into the HIPAA world. The FTC Act requires you to live up to the privacy and security of consumer…
Read more →Sarrah Hakim, Manager of Health Policy
In this blog, we highlight important ASCQR dates and action items. You can use the key action checklists provided throughout the blog to stay on track during the 2025 performance…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) recently announced that they have identified Los Angeles County in California as qualifying for an automatic 2025 MIPS extreme…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) recently announced that they have identified certain counties in South Carolina and Los Angeles County to add to the list of…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has finalized new MIPS Value Pathways (MVPs) that are relevant to specialties we serve. One of these is the Complete…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Wondering what I would do if I owned a healthcare organization? If I had an endless bank account: All users in systems and applications containing ePHI would have unique user IDs…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Directly from the Executive Summary in the Notice of Proposed Rulemaking, Federal Register: The Security Rule was initially published in 2003 and most recently revised in 2013…
Read more →Sarrah Hakim, Manager of Health Policy
We’re here to help you start the new year strong. In this blog, we highlight important MIPS dates and action items. You can use the key action checklists provided throughout the…
Read more →Dawn Meglino, HIPAA Compliance Specialist
One of the greatest risks to a healthcare organization is the lack of cybersecurity and security awareness training. The responsibility of training lies with each organization…
Read more →Sarrah Hakim, Manager of Health Policy
Electronic Case Reporting (eCR) has been required under the MIPS Promoting Interoperability (PI) category since the beginning of performance year 2022. As we head into the fourth…
Read more →Dawn Meglino, HIPAA Compliance Specialist
On December 27, 2024, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) issued a Notice of Proposed Rulemaking (NPRM) to modify the…
Read more →All claims billed with DOS starting 1/1/2025 will reflect your MIPS payment adjustment. Your Medicare Part B physician services payments in 2025 will be adjusted based on your…
Read more →Dawn Meglino, HIPAA Compliance Specialist
As we move into 2025, more than ever, it’s time to assess the security and compliance of your organization. Every day an article is in the news about the latest hacking…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The HIPAA Security Rule defines Administrative Safeguards (45 CFR § 164.308) as “administrative actions, and policies and procedures, to manage the selection, development…
Read more →Sarrah Hakim, Manager of Health Policy
Beginning in 2025, the Centers for Medicare and Medicaid Services (CMS) will require the OAS CAHPS Survey measure for ASCQR participants. If you are unfamiliar with this measure…
Read more →Sarrah Hakim, Manager of Health Policy
The deadline to file for a 2024 MIPS hardship is rapidly approaching. The Centers for Medicare and Medicaid Services (CMS) requires 2024 MIPS hardship applications to be submitted…
Read more →Dawn Meglino, HIPAA Compliance Specialist
It’s the most wonderful time of the year; however, could there be more to do?! Here’s why you need to stay ever-vigilant: threat actors are doing exactly the same, especially…
Read more →Sarrah Hakim, Manager of Health Policy
The end of the year is quickly approaching, and if you haven’t completed your 2024 security requirements yet, now is the time to act. The Promoting Interoperability (PI) category…
Read more →Dawn Meglino, HIPAA Compliance Specialist
So many passwords for so many accounts – what is a person to do? Are you thinking “I’m SO tired of hearing about passwords or having to create them, and not able to use four…
Read more →Since its launch in 2015, Windows 10 has been a reliable operating system choice, widely used across industries. However, with Microsoft announcing the Windows 10 end-of-life…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The Internet of Things, most commonly referred to as IoT, are devices that may be used in healthcare environments. Some examples include: Remote patient monitoring Blood glucose…
Read more →Sarrah Hakim, Manager of Health Policy
We’re taking a moment to reflect on the positive policy changes that the Centers for Medicare and Medicaid Services (CMS) finalized for MIPS. One of these is the new cost scoring…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Health and Human Services Office for Civil Rights (OCR) addressed the use of artificial intelligence (AI) in healthcare environments while maintaining HIPAA compliance. HIPAA…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The 2024 updates to the HIPAA Privacy Rules include: Allowing patients to inspect PHI in person and take notes or photographs of their PHI. Changing the maximum time to provide…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has finalized a policy allowing MIPS participants to request a hardship if their performance data is not submitted due to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
During the OCR/NIST Safeguarding Health Information HIPAA Security Conference held in October 2024, OCR Director Melanie Fontes Rainer stated one of the main focuses for OCR will…
Read more →As the year winds down, we’re excited to bring you a variety of educational webinars to help you plan for 2025. This November and December, we’re offering insightful webinars on…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) recently announced that they have identified certain counties in Florida, Georgia, Louisiana, North Carolina, South Carolina…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The HIPAA Privacy Rule mandates that organizations take steps to protect Protected Health Information (PHI). The HIPAA Security Rule provides specific guidelines on how to…
Read more →Sarrah Hakim, Manager of Health Policy
The Centers for Medicare and Medicaid Services (CMS) has officially released the 2025 Quality Payment Program (QPP) final rule. The 3,088-page final rule contained many changes…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
On November 1, 2024 the Centers for Medicare and Medicaid Services (CMS) released the 1,734-page 2025 Ambulatory Surgical Center Quality Reporting Program (ASCQR) Final Rule. This…
Read more →Dawn Meglino, HIPAA Compliance Specialist
First and foremost, spread the word about Cybersecurity Awareness and Cyber Hygiene – we are all in this together. There are so many organizations supporting cybersecurity…
Read more →Dawn Meglino, HIPAA Compliance Specialist
If you haven’t looked into Cyber Insurance you may be surprised (or shocked!) at what Cyber Insurance companies are requiring to cover your organization. The responsibility of…
Read more →Sarrah Hakim, Manager of Health Policy
If you’re curious about the information blocking disincentives introduced this past summer, you’re in the right place. In June 2024, the Department of Health and Human Services…
Read more →While attending a recent Cybersecurity Conference some basic “key” points came up: Our daily lives are filled with lots of business, whether the job at the office, kids’…
Read more →Between strong passwords entered, 6-digit pins texted to our phones, and fingerprints scanned, cybersecurity is an everyday practice that goes far beyond the workplace and into…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Cybersecurity Awareness Month, co-led by Cybersecurity and Infrastructure Security Agency (CISA) and National Cybersecurity Alliance (NCA), is dedicated to educate individuals and…
Read more →Dawn Meglino, HIPAA Compliance Specialist
October marks Cybersecurity Awareness Month, a time to highlight the critical need for vigilance against digital threats, particularly in the healthcare sector. As the landscape…
Read more →Dawn Meglino, HIPAA Compliance Specialist
A HIPAA violation is defined as the following: the failure to comply with the HIPAA Rules – Privacy, Security and Breach Notification. The failure to comply with any of the…
Read more →Sarrah Hakim, Manager of Health Policy
Anatomy IT asks Centers for Medicare and Medicaid Services (CMS) to consider your experience with quality reporting programs in comments submitted on both the 2025 Quality Payment…
Read more →Dawn Meglino, HIPAA Compliance Specialist
1. Carefully inspect links and attachments in emails before taking action. When in doubt contact the sender directly (phone call). Always look for the “Red Flags” to determine an…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Healthcare organizations and their Business Associates must conduct a Security Risk Analysis (SRA) as required by the HIPAA Security Rule, to evaluate potential risks and…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Practices must provide an up-to-date training program on the handling of PHI, patients and their confidentiality and all security aspects as it pertains to patient data. Do not…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The Health Sector Coordinating Council (HSCC) Cybersecurity Working Group (CWG) is an industry-led council of more than 400 healthcare organizations advising the government and…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The million-dollar question?! Well, not that much thank goodness. Physical servers offer the benefit of dedicated resources providing consistent performance for organizations with…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Multi-factor authentication (MFA) is a multi-step login process that requires users to provide more than just a password to verify their identity. MFA increases security levels by…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Did you know that in the HIPAA Rules a Disaster Recovery Plan is a requirement? The HIPAA Security Rule requires healthcare organizations to implement a Disaster Recovery Plan…
Read more →Dawn Meglino, HIPAA Compliance Specialist
As promised, let’s delve into how to successfully get to HIPAA 26.2! There will never be a “finish line” when it comes to HIPAA privacy, security and now, cybersecurity awareness…
Read more →The Centers for Medicare and Medicaid Services (CMS) released the 2025 Quality Payment Program (QPP) proposed rule. The 2,248-page proposed rule contained many changes that we…
Read more →Dawn Meglino, HIPAA Compliance Specialist
What is Identity Security and why do we need to pay such close attention to this? Identity security is not just about authentication and authorization, it is at the heart of…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Per NIST a Vulnerability Scan is a technique used to identify hosts/host attributes and associated vulnerabilities. Vulnerability scans can help identify weaknesses in…
Read more →Join us on Tuesday, July 30th at 12:00 pm ET for an insightful webinar where we review the top proposed changes to the MIPS program for 2025. Webinar Details: Date: Tuesday, July…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
The Centers for Medicare and Medicaid Services (CMS) has officially released the 2025 Quality Payment Program (QPP) proposed rule. The 2,248-page proposed rule contained many…
Read more →Jessica Peterson, Senior Director of Value-Based Care Policy
On July 10, 2024 the Centers for Medicare and Medicaid Services (CMS) released the 984-page 2025 Ambulatory Surgical Center Quality Reporting Program (ASCQR) Proposed Rule. This…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Most healthcare organizations will disable access to the EMR, Practice Management or billing systems and applications promptly (even immediately) upon a resignation or termination…
Read more →Dawn Meglino, HIPAA Compliance Specialist
I know what you’re thinking – is this possible? How great would my life be as the privacy, security and/or compliance officer if this were the case! Healthcare organizations have…
Read more →Dawn Meglino, HIPAA Compliance Specialist
On April 30th the White House released National Security Memorandum-22 (NSM-22) on Critical Infrastructure Security and Resilience which updates national policy on how the U.S…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Verizon’s 2024 Data Breach Investigations Report (DBIR) aims to shine light on the various threat actor types, the tactics they utilize and the targets they choose. From year to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
What would you do? How quickly would your organization be able to recover and continue providing patient care? Disaster Recovery / Contingency Plans, cybersecurity training for…
Read more →The Centers for Medicare and Medicaid Services (CMS) recently published the national statistics on 2022 Merit-based Incentive Payment System (MIPS) performance. 2022 MIPS Outcomes…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The HIPAA Privacy Rule and the HIPAA Security Rule require training for Covered Entities, Business Associates, Business Associate Subcontractors, and their workforce members. The…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Identity and access management is a set of security services, processes, policies and tools used to define and manage the roles and permissions of users, devices and application…
Read more →1. Ask about multifactor authentication and where it would be possible to implement. This could be on email accounts, logging in remotely to the business, connecting to a cloud…
Read more →Have you had difficulties finding a referring provider’s direct address? You are not alone! The NPPES system now supports updating your providers’ NPI registration with their…
Read more →Dawn Meglino, HIPAA Compliance Specialist
Implementing cybersecurity best practices is crucial for individuals and organizations to protect themselves against cyber risks. A strong foundation includes identifying…
Read more →The Centers for Medicare and Medicaid Services (CMS) has opened the 2024 MIPS hardship applications. The deadline to apply is December 31, 2024 at 8 pm ET. There are two…
Read more →Dawn Meglino, HIPAA Compliance Specialist
I’d like this to sound like a broken record if it weren’t true: A recent study showed that 20% of passwords are compromised and 51% of passwords are reused. These statistics shed…
Read more →Dawn Meglino, HIPAA Compliance Specialist
While news headlines announce large company breaches from cybersecurity incidents it is just as likely for cybercriminals to target small or mid-size businesses (SMBs). And why is…
Read more →Dawn Meglino, HIPAA Compliance Specialist
A breach is, generally, an impermissible use or disclosure under the Privacy Rule that compromises the security or privacy of PHI. An impermissible use or disclosure of unsecured…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The Health Industry Cybersecurity Practices (HICP) is a publication providing guidance to organizations, companies and manufacturers in the healthcare industry, helping them to…
Read more →Confused about the new MIPS Promoting Interoperability (PI) category High Priority Practices Safety Assurance Factors for EHR Resilience (SAFER) Guide attestation? You’re not…
Read more →Dawn Meglino, HIPAA Compliance Specialist
When comparing the HIPAA Rules – Privacy, Security, Omnibus and Breach Notification – to a half marathon, think about the following areas that must be taken into account to…
Read more →Dawn Meglino, HIPAA Compliance Specialist
The proposed rule, or Notice of Proposed Rulemaking (NPRM), is the official document that announces and explains the agency’s plan to address a problem or accomplish a goal. HIPAA…
Read more →Every day cyber-attacks are an ever increasing threat to businesses and organizations, especially in the healthcare sector, where patient data / one medical record can be sold on…
Read more →Avoiding a MIPS penalty using claims reporting for Quality is getting increasingly difficult. While transitioning to electronic reporting is the safest way forward, it isn’t an…
Read more →Last week’s HIPAA Tip reviewed the HPH Cybersecurity essential goals. It’s now time to go through the 10 enhanced goals. The enhanced goals were put in place to help healthcare…
Read more →The Centers for Medicare and Medicaid Services (CMS) announced that they are reopening the applications for 2023 MIPS extreme and uncontrollable circumstances (EUC) hardships to…
Read more →March 21-23 | Las Vegas, Nevada Are you ready to take your organization to the next level? Look no further than Booth #31 at the Nextech Edge Conference! Our team is thrilled to…
Read more →Are you ready to elevate your practice’s performance in the complex landscape of MIPS? Look no further! Anatomy IT proudly presents our latest offering: the 2024 Educational MIPS…
Read more →In a previous HIPAA Tip we discussed the HHS Cybersecurity Performance Goals (CPG) released for Health Care and Public Health (HPH) – essential and enhanced goals. The essential…
Read more →Avoiding a MIPS penalty using claims reporting for Quality is getting increasingly difficult. While transitioning to electronic reporting is the safest way forward, it isn’t an…
Read more →It should be no surprise to Covered Entities and Business Associates that a Risk Analysis is a requirement under the HIPAA Security Rule, § 164.308(a)(1)(ii)(A): Conduct an…
Read more →The HIPAA Security Rule is in place to address the Administrative, Physical and Technical Safeguards that must be put in place to ensure the Confidentiality, Integrity and…
Read more →Under the HIPAA Security Rule Physical Safeguards a Facility Security Plan (164.310(a)(2)(ii)) is defined as the following: “implement policies and procedures to safeguard the…
Read more →Attending the National HIPAA Summit always brings up questions, even on the most basic topics/categories of the HIPAA Rule; one being Business Associates. HHS defines Business…
Read more →In order to continually enhance your organization’s cybersecurity position you need buy-in from your employees. When it comes to maintaining security for the organization this is…
Read more →Electronic Case Reporting (eCR) has been required under the MIPS Promoting Interoperability category since the beginning of performance year 2022. As we head into the third year…
Read more →Multi-factor authentication is defined as three authentication factors: something you know, something you have and something you are; this becomes very important for online…
Read more →Data Privacy Week runs January 21 through January 27, 2024. This initiative aims to raise awareness and promote online privacy among individuals and organizations. As companies…
Read more →First and foremost, do you know where all of your organization’s Protected Health Information (PHI), electronic Protected Health Information (ePHI) and Personally Identifiable…
Read more →Pramoda Bapatla, Health Policy Analyst
All claims billed with DOS starting 1/1/2024 will reflect your MIPS payment adjustment. Your payments for services in 2024 will be adjusted based on your 2022 MIPS score. Some…
Read more →2023 statistics are not in yet for security incidents that ended as HIPAA breaches, but all one needs to do is review The Office for Civil Rights HIPAA Wall of Shame to remind…
Read more →Here are some top New Year’s resolutions to follow the HIPAA Privacy and Security Rules: 1. Make the organization more compliant. 2. Build up the security measures within the…
Read more →Learn how to strengthen your business performance, protect critical data, and reduce risk with our tailored services and solutions.
Let's Connect (opens in a new tab)
