The Definitive Guide to Complying with the HIPAA/HITECH Privacy and Security Rules

Chapter 14

Security Rule: Incident Response

Objectives

The objectives of this chapter are as follows:

• ■  Determine what standard format will be utilized to cover security incidences within the covered entity.
• ■  Understand the steps involved in handling a security incident.
• ■  Understand what type of notifications should be made during a security incident.
• ■  Determine what details should be collected during the investigation of a security incident.
• ■  Determine who will be responsible to handle a security incident.
• ■  Understand the types of actions to take to resolve a security incident.
• ■  Understand the types of recommendations that may be a result of a security incident taking place.

Background

In this chapter, the actual steps involved ...