title: Security breaches: tips for assessing and limiting your risks.
abstract: As part of their compliance planning, medical practices should undergo a risk assessment to determine any vulnerability within the practice relative to security breaches. Practices should also implement safeguards to limit their risks. Such safeguards include facility access controls, information and electronic media management, use of business associate agreements, and education and enforcement. Implementation of specific policies and procedures to address security incidents is another critical step that medical practices should take as part of their security incident prevention plan. Medical practices should not only develop policies and procedures to prevent, detect, contain, and correct security violations, but should make sure that such policies and procedures are actually implemented in their everyday operations.
authors.affiliation: Krieg DeVault LLP, One Indiana Square, Suite 2800, Indianapolis, IN 46204, USA. lcoons@kdlegal.com
authors.forename: Leeanne R
authors.initials: LR
authors.lastname: Coons
mesh_terms: D016494:Computer Security / Q000331:legislation & jurisprudence*; D020408:Health Insurance Portability and Accountability Act; D006801:Humans; D011050:Policy Making; D011216:Practice Management, Medical / Q000331:legislation & jurisprudence*; D018907:Privacy / Q000331:legislation & jurisprudence; D018570:Risk Assessment; D012308:Risk Management / Q000331:legislation & jurisprudence*; D012637:Security Measures / Q000331:legislation & jurisprudence*; D014481:United States