The Definitive Guide to Complying with the HIPAA/HITECH Privacy and Security Rules

Chapter 13

Security Rule: Security Awareness Training

Objectives

The objectives of this chapter are as follows:

• ■  Understand how to set up a training strategy and plan.
• ■  Determine what type of content, materials, or methods to provide in security awareness training.
• ■  Determine how to implement security awareness training.
• ■  Understand what is involved with monitoring and evaluating the security awareness training plan.
• ■  Determine how to develop an outline for security awareness training to include all necessary elements.

Background

Under 45 § CFR 164.308(a)(5), security awareness training needs to be addressed as part of the Security Rule requirements. It is completely up to the covered entity how this security awareness training ...