Tag: HIPAA – HITECH – HITRUST

EpicCare – Preconfigured Specialty Modules

  Allergy- Immunology Bariatric Surgery Cardiology Cardiothoracic Surgery Dermatology Endocrinology ENT Family Medicine Gastroenterology Gerontology General Surgery Genetics Infectious Disease Internal Medicine Nephrology Neurology Obstetrics Occupational Therapy Oncology Ophthalmology Orthopedics PM&R Physical Therapy Plastic Surgery Podiatry General Pediatrics Psychiatry Pulmonology Radiation Oncology Respiratory Therapy Rheumatology Sleep Lab SLP Sports Medicine Transplant Urgent Care Urology Vascular… Continue reading EpicCare – Preconfigured Specialty Modules

EpicCare – Patient Management Modules

Available Epic Modules Description EpicCare Link (Shared Medical Record for Community Providers) Allows affiliates who refer patients to you to follow the progress of their patients, review results, request appointments, place procedure orders, and communicate via in Basket; organizes referral process to affiliates to whom you refer and allows affiliate clinic managers ability to manage… Continue reading EpicCare – Patient Management Modules

EpicCare – Reporting Tools and Modules

Available Epic Modules Description Business Objects’ Crystal Reports PQRI and other pay-for-performance reports. Health Information Management (HIM) Chart and film tracking; chart deficiencies; release of information (track requests for copies of medical records, enter charges / payments, and used for release process including printing / faxing release forms); coding and abstracting (processes coding info from… Continue reading EpicCare – Reporting Tools and Modules

EpicCare – Access and Authentication Modules

Available Epic Modules Description EpicCare Link (Shared Medical Record for Community Providers) Allows affiliates who refer patients to you to follow the progress of their patients, review results, request appointments, place procedure orders, and communicate via in Basket; organizes referral process to affiliates to whom you refer and allows affiliate clinic managers ability to manage… Continue reading EpicCare – Access and Authentication Modules

EpicCare – Patient Services Modules

Available Epic Modules Description EpicCare Link (Shared Medical Record for Community Providers) Allows affiliates who refer patients to you to follow the progress of their patients, review results, request appointments, place procedure orders, and communicate via in Basket; organizes referral process to affiliates to whom you refer and allows affiliate clinic managers ability to manage… Continue reading EpicCare – Patient Services Modules

IT Operations and Maintenance and NIST standards that apply

IT Operations and Maintenance Review Operational Readiness SP 800-70 SP 800-53A Perform Configuration Management SP 800-53A SP 800-100 Conducting Continuous Monitoring SP 800-53A SP 800-100 Conduct Re-Authorization SP 800-37 SP 800-53A Engineering and Development Controls SP 800-53 FIPS-200 www.bestitdocuments.com

Assessment descriptions and NIST standards that apply

Integrate Security into Established Environments SP 800-64 Certify System Security SP 800-37 SP 800-53A Test and Assess Security Controls SP 800-37 SP 800-53A Accredit System Security SP 800-37 Operation and Maintenance Readiness SP 800-70 SP 800-53A Perform Configuration Management SP 800-100 SP 800-53A Conduct Continuous Monitoring SP 800-100 SP 800-53A Conduct Re-Authorization SP 800-37 SP… Continue reading Assessment descriptions and NIST standards that apply

SDLC Descriptions and NIST Standards that apply

SDLC Activity and supporting NIST publications NIST SP 800-64 Project Initiation – Security Planning SP 800-64 SP 800-100 SP 800-37 SP 800-53 Categorize Security for the System SP 800-60 FIPS-199 Assess Risk to a System SP 800-30 Analyze Risk Requirements SP 800-53 Assess Business Impact SP 800-34 Assess Policy Considerations SP 800-37 Secure Information System… Continue reading SDLC Descriptions and NIST Standards that apply

Sample Excel – NIST – Security Test Evaluation Report spreadsheet

Hopefully this is helpful to you.. We appreciate your comments and would greatly appreciate your backlinks… thank you ! Certificate & Accreditation and Security Assessment Mapping to NIST Standards. Free – Document download Security Test Evaluation Report spreadsheet www.bestitdocuments.com

System Log Events that should be logged

Therefore, logs shall be created whenever any of the following activities are requested to be performed by the system: Create, read, update, or delete confidential information, including confidential authentication information such as passwords; Create, update, or delete information not covered in above (1); Initiate a network connection; Accept a network connection; User authentication and authorization… Continue reading System Log Events that should be logged

Compliance – Audit Reporting Requirements (SOX, HIPAA, GLBA and PCI)

SOX, HIPAA, GLBA and PCI requirements: SOX Audit Reports User Logons Sec 302(a)(4)(C) and 302(a)(4)(D) require user accesses to the system, be recorded and monitored for possible abuse. User Logoffs Sec 302(a)(4)(C) and 302(a)(4)(D) require user accesses to the system, be recorded and monitored for possible abuse. Logon Failures Shows all unsuccessful login attempts by… Continue reading Compliance – Audit Reporting Requirements (SOX, HIPAA, GLBA and PCI)

Internal vs. External HelpDesk

Characteristics of an Internal HelpDesk Customer is internal to the company  Network & systems mgmt. integration very important  Integrated “self-help” systems needed Remote access and desktop control features needed Characteristics of an External HelpDesk Customer is external More focus on defect tracking, field dispatch & contract management modules More closely linked to sales and marketing… Continue reading Internal vs. External HelpDesk

HIPAA – Identitiy and Access Management SOC Dashboard Considerations

What a Security Operations Center IAM dashboard should present. Number of Requestable Products Average Request Processing Time New Rule Violations Employees by functional area Pending Requests Entitlement Assignments with / without requests Employees by status Pending Attestation Instances Number of Internal and External Employees Top 10 Departments (Members) www.bestitdocuments.com

HIPAA – Identitiy and Access Management Considerations

Safeguard Standard Implementation Specification Technical Access Control Unique User Identification Automatic Log-off Audit Controls Person or entity Authentication Strong Authentication Physical Facility for access controls Physical Access Administration Security Management Process Risk Management Activity Review Workforce Security Termination Procedure Information Access Management Isolation Healthcare Clearing House Security Incident Procedures Login Monitoring “HIAA” – Health Insurers… Continue reading HIPAA – Identitiy and Access Management Considerations

PACS (Picture Archiving and Communication Systems)

PACs – Various Network Technologies, Bandwidths and Typical Transfer Times for Radiological Imaging. Network Technology Bandwidth Chest Radiograph 8.4MB Chest CT Scan50MB T1 1.54Mb/s 43 sec 4.3 min Ethernet 10Mb/s 6.7 sec 40 sec Fast Ethernet 100Mb/s 0.7 sec 4 sec ATM 155Mb/s 0.4 sec 2.6 sec Gigabit Ethernet 1Gb/s 0.07 sec 0.4 sec