HIPAA Manual: Privacy & Security Compliance Training

This is the most comprehensive HIPAA training manual for different HIPAA Certifications on Privacy and Security rule or self-study HIPAA training. This HIPAA book focuses on the Administrative Simplification portion of HIPAA and the Transactions, Privacy, and Security Rules defined within it. This guide contains explanations of the final Security Rule’s standards and implementation specifications in the areas of Administrative, Physical, and Technical Safeguards. Assessment tools, methodologies, and sample security policies that can be utilized to bring a covered entity into compliance are all included in the text. In addition, major networking protocols and technologies are discussed and evaluated in regard to their relevance to information security.

This manual is very helpful in understanding the HIPAA laws, their penalties, how to start compliance, etc. This HIPAA guide is invaluable for members of HIPAA compliance teams, HIPAA Privacy Officers, HIPAA Security Officers, project managers, network administrators, consultants, and anyone else involved in the HIPAA compliance efforts of the organization.

Table of Content of HIPAA Manual with PowerPoint

Unit 1: HIPAA Basics

• HIPAA introduction
• Administrative Simplification
• HIPAA penalties
• HIPAA-related organizations
• HIPAA terminology

Unit 2: Transactions & Code Sets Overview

• Transactions

Unit 3: Transactions – ANSI X12 and NCPDP transaction types

• ANSI ASC X12 standards

Unit 4: Code sets & National Identifiers

• Code sets
• National health care identifiers

Unit 5: HIPAA and e-Health – Security and privacy requirements

• HIPAA, EHRs, and e-health
• Planning for privacy compliance
• Planning for security compliance
• Scenario: Possible framework for compliance

Unit 6: HIPAA Privacy Rule

• Introduction to the Privacy Rule

Unit 7: Privacy Rule – Organizational and individual relationships, rights, and responsibilities

• Organizational requirements and relationships
• Individual privacy rights

Unit 8: Privacy Rule – Notice of Privacy Practices

• Notice of Privacy Practices and Authorizations

Unit 9: Privacy Rule – Uses and disclosures of PHI

• Uses and disclosures: General
• Uses and disclosures: treatment, payment, and health care operations
• Uses and disclosures: Public purposes

Unit 10: Privacy Rule – Safeguards

• Safeguards

Unit 11: HIPAA Security Rule – Overview

• Scope of the HIPAA Security Rule
• Threats to business information
• Security terminology and categories
• Administrative safeguards
• Physical safeguards
• Technical safeguards
• Organizational requirements
• Policies and procedures, and documentation standards

Unit 12: HIPAA Security Rule – Threats and technology options

• Security threats
• Security technology options

Unit 13: Advanced Administrative Safeguards

• Security awareness and training
• Security incident procedures
• Contingency plans
• Evaluation
• Business Associate Contracts and other arrangements

Unit 14: Physical Safeguards Overview

• Privacy Rule physical safeguards

Unit 15: Advanced Physical Safeguards

• Requirements
• Facility access controls
• Workstation use and security
• Specific steps – Physical security implementation

Unit 16: Physical Safeguards – Device and Media Management

• Device and media controls

Unit 17: General Technical Safeguards

• Requirements
• Access control
• Audit controls
• Integrity
• Person or entity authentication

Unit 18: Advanced Technical Safeguards

• Transmission security
• TCP/IP network infrastructure
• Firewall systems
• Virtual Private Networks (VPNs)
• Wireless transmission security
• Encryption
• Kerberos authentication
• Case study: Windows XP security

Unit 19: Digital Signatures and Certificates

• Requirements
• Digital signatures
• Digital certificates
• Public Key Infrastructure (PKI)

Unit 20: Security Policy

• Threats, risk management, and policy
• ISO 27002 security standards
• Security policy considerations
• Sample security policy documents

Unit 21: HITECH Act and Red Flag Rule

• HITECH Act

Unit 22: Omnibus Rule

• The Omnibus Rule

Unit 23: EHRs and Meaningful Use

• Moving Towards Electronic Health Records
• Meaningful Use

Unit 24: HIPAA Compliance and Enforcement

• Topic A: HIPAA Compliance Enforcement
• Topic B: HIPAA Compliance Audits

Unit 25: Social Media, Mobile Technology, and Big Data

• Topic A: The Digital Universe
• Topic B: Privacy and Security in the Digital Universe

Appendix A: HIPAA Security Rule

• HIPAA Security Rule standards

Appendix B: HIPAA Privacy Rule

• HIPAA Privacy Rule standards

Appendix C: Job role/unit matrix

• Job role matrix

Course Summary

• Topic A: Course summary
• Topic B: Continued learning after class

Glossary

Index