title: Risk management methodology for HIPAA security standard.
abstract: The Health Insurance Portability and Accountability Act (HIPAA) security standard requires a formal security management process that includes risk management. Risk management is a detailed process used to identify and assess risk, identify and accept mediation for risk, and maintain an acceptable level of risk. This chapter explains the risk management methodology developed by Providence Health System for HIPAA compliance. Providence risk management methodology includes risk analysis and assessment for both hard and soft assets.
authors.affiliation: Regional Information Services, Providence Health System in Tigard, Oregon, USA.
authors.forename: R
authors.initials: R
authors.lastname: Aikins
mesh_terms: D016494:Computer Security / Q000592:standards*; D019983:Guideline Adherence; D020408:Health Insurance Portability and Accountability Act / Q000592:standards*; D019451:Information Management / Q000592:standards*; D009922:Oregon; D012308:Risk Management / Q000379:methods*; D012637:Security Measures / Q000592:standards*; D014481:United States