Syllabus

1. Getting Into a Security Mindset
   • Apply mental health professional ethics of confidentiality, records maintenance, and professional boundaries to support effective therapeutic conditions as an administrator.
   • Describe the HIPAA Security and Privacy Rules and apply them to the administrator’s role in confidentiality and record maintenance.
   • Identify common behavior mistakes administrators make in their role in office security and privacy and implement best practice HIPAA secure behavioral procedures.
2. HIPAA and Client Privacy
   • Demonstrate the ability to identify Protected Health Information (PHI).
   • Describe under what circumstances it is appropriate to release PHI and identify what PHI is appropriate to disclose.
   • List the required information a HIPAA-compliant Release of Information (ROI) form must contain and use form to perform HIPAA-compliant Releases of Information.
   • Implement best practice behaviors to properly maintain security when performing a Release of Information.
3. Using the Practice’s Tech In the Admin Role
   • Determine what methods of secure communication the practice utilizes and assess what communication methods are specific to your role as an administrator.
   • Demonstrate knowledge of client’s rights to secure communication under HIPAA and explain to clients the risk of nonsecure communication.
   • Prepare for accidental exposure to PHI and demonstrate competency of best practice behaviors of how administrators respond to accidental exposure.
   • Utilize the practice’s Bring Your Own Device Policy to determine how to keep your personal electronic device secure and use your device securely.
4. Participating in the Practices’ Risk Management Activity
   • Demonstrate competency of the practice’s Security Policies and Procedures and assess how the policies and procedures apply to your role as an administrator.
   • Assess your role in office security and apply knowledge to support office safety.
   • Prepare to use the practice’s contingency plan in the event of a disaster, emergency, or outage and describe your role as an administrator in contingency plan execution.