Digital Confidentiality According to Professional Ethics and HIPAA: A Heart-Centered Approach Level II

Course Materials

Introduction

An Exercise Whose Point is Unclear

1. Clients, Professionals, & Behavior in Security

Secure Behaviors

2. Legally and Ethically Secure by the Numbers: The "Before" Part

Decision Psychology in Security and Privacy

How To Comply With the HIPAA Security Rule: A Step-by-Step Guide

Step 1. Security Risk Analysis

Step 1 (cont.) Security Risk Analysis: The Process

Step 2. Risk Management Planning

Step 3. Policies and Procedures Manual

3. Legally and Ethically Secure by the Numbers: The After Part

Breach Notification

Risk Analysis Parties!

Rescuing (or Sacrificing) Your Lost or Stolen Mobile

Security Incidents

Safe Harbor from the HIPAA Breach Notification Rule

How Encryption Makes Safe Harbor: or “Why Encrypting Before is Great For After”

4. Electronic Records, and “the Cloud”

Data Backups: Your Best Friend For “After”

Electronic Health Records

“The Cloud”

The Cloud and Availability & Integrity

Disclosure of Electronic Record-Keeping

Passwords vs. Passphrases, and Password Management Programs

The Cloud, Mobiles, and Breach Assessment

Protecting Your Cloud Services

Cloud Services and the HIPAA Business Associate Rule

Special Aside: Business Associates and Financial Institutions

Epilogue

Bibliography

Below are the works that are cited in this course. If you are looking for resources to assist you in using the information you learned in this course, we suggest you click here for the Resources page.

Course References

American Counseling Association. (2014). ACA Code of Ethics. Alexandria, VA: Author.
HealthIT.gov. (n.d.). What is an electronic health record (EHR)? Retrieved Nov 20, 2013, from HealthIT.gov: http://www.healthit.gov/providers-professionals/faqs/what-electronic-health-record-ehr
Schneier, B. (2008, Jan). The Psychology of Security. Retrieved Sep 2013, from https://www.schneier.com/essay-155.html
US Dept. of Health and Human Services. (2006). HIPAA Administrative Simplification . Washington, DC: Author.
US Dept. of Health and Human Services. (2013). HIPAA Omnibus Final Rule . Washington, DC: Author.
US Dept. of Health and Human Services. (2007, Mar). Basics of Risk Analysis and Risk Management. Retrieved Feb 6, 2014, from HHS.gov: http://www.hhs.gov/ocr/privacy/hipaa/administrative/securityrule/riskassessment.pdf

Digital Confidentiality According to Professional Ethics and HIPAA: A Heart-Centered Approach Level II

Course Materials

Bibliography

Course References

Scheduled Maintenance