I recently had the opportunity to present an HCCA continuing education webinar on the NPRM related to the proposed changes to the HIPAA Rule. I invite you to watch the 5-minute clip here, where I talk about proposed patching expectations and touch on the Security Risk Analysis’s emphasis.
Here at Apgar and Associates, we’re scheduling into 2026 for comprehensive organizational Security Risk Analyses. Both Business Associates and Covered Entities are revisiting the depth and breadth of their recent SRAs after the OCR’s announced intention of more intense scrutiny.
Not sure where you are in the SRA “strength” scheme of things? Consider the article I wrote earlier this year, “If the NPRM Becomes Law, Will Your Security Risk Analysis Hold Up?”
If you have questions about your Compliance Program or need to update Policies & Procedures to align with new privacy and security initiatives, please give us a call today!