General Information

Identifiers

Privacy

Security

Transactions & Code Sets

Education

Services by Members

General Info

Identifiers

Privacy

Security

Transactions & Code Sets

Security

Resources | References | Education | Regional Initiatives | Secure E-mail

Resources

• Security Officers Forum - MA Health Data Consortium
• HIPAA EarlyView^TM Security Tool - NCHICA offers this powerful Security self-evaluation software tool to help you assess your organization's readiness to comply with HIPAA
• Privacy Resource Center
• S/MIME Gateway (SMG) Project Information - a compendium of information pertaining to the MHDC Secure Messaging Project
• Crosswalks: Security Crosswalk Documents from WEDI/URAC/NIST/HIMSS
• Surveys: HIMSS / Phoenix Health Care Quarterly Compliance Surveys
• White Papers:
  • Centers for Medicare and Medicaid Services HIPAA Security Educational Paper Series
  • "HIPAA Security White Papers" by SNIP Security and Privacy Workgroup
  • "'Sidebar' on Security: Some Information Security Highlights"   - Presentation by SNIP Security and Privacy Workgroup
  • URAC, "An Assessment of HIPAA Security Preparedness: Most Health Care Organizations Remain Noncompliant" - Case Study Report

References

• Legislation:
  • HIPAA Security Standards Final Rule - February 12, 2003
  • Proposed Security Rule - August 12, 1998
• Security Policies:
  • HCFA Internet Security Policy (Date of Issuance - November 24, 1998)
• Articles:
  • The HealthKey releases "A Summary Report to the Community" on eHealth Security Standards; Related story in USA Today (10/9/01)
• Dictionaries and Guides:
  • Association of American Medical Colleges (AAMC) - "Guidelines for Academic Medical Centers on Security and Privacy: Practical Strategies for Addressing the Health Insurance Portability and Accountability Act"
  • National Insititute of Technology and Standards (NIST), "An Introductory Resource Guide for Implementation of the HIPAA Security Rule" - DRAFT
• Forms:
  • North Carolina Healthcare Information and Communications Alliance, Inc. (NCHICA), HIPAA Sample Documents
• Security Officer Job Descriptions:
  • Veterans Press
  • HIPAAdvisory
  • National Association of Chain Drug Stores
• Websites:
  • http://www.securityfocus.com - a clearinghouse for recent vulnerability information; mailing lists
  • SANS Institute - http://www.sans.org - systems and network security, IIRC
  • U.S. Department of Homeland Security’s Information Analysis and Infrastructure Protection (IAIP) Directorate - http://www.dhs.gov/dhspublic/display?theme=31
  • National Institute of Standards and Technology, Computer Security Resource Center - http://csrc.nist.gov
  • http://www.infoguard.org

Education

• MHDC - HIPAA Education Programs
• Secure Messaging for Healthcare (The Open Group Conference)
  Boundaryless Information Flow: Open Standards and Certification
  Thursday, February 5 - 9:00am-1:00pm
  Location: San Diego Marriott Mission Valley

Regional Initiatives

• Security Officers Forum - Massachusetts Health Data Consortium
• HealthKey Five State Project
• Articles:
  • The HealthKey releases "A Summary Report to the Community" on eHealth Security Standards
  • Related story in USA Today (10/9/01)
  • PDF of the entire HealthKey Summary Report: HK Summary Report.pdf
• Workplan: HealthKey Roadmap - a "blue print for making progress towards a community-wide privacy and security infrastructure." Roadmap_Abbreviated.ppt

Did you find what you were looking for? Would you like to contribute policies, procedures or other documents to be a shared resource? Please contact us at via e-mail.