855-447-2210 experts@loricca.com

Incident Response 101: Where Notification Requirements May Differ from HIPAA

In our recent series of articles answering the key questions about what notifications steps HIPAA regulated organizations must take after a security breach, we have looked at: Who is Required to Report a Breach? When Do You Need to Report a Breach?  What Must Be...

Incident Response 101: What Should You Document and Report after a HIPAA Breach?

In the first two installments of this series discussing the next steps HIPAA regulated organizations must take after a security breach. So far, we have looked at: Who is Required to Report a Breach? When Do You Need to Report a Breach? Next, let’s discuss what is to...

Incident Response 101: Who is Required to Report a Breach?

We know you have questions. In Part One of a planned series of articles to look at the basic considerations of Incident Response best practices, let’s start with understanding who is required to report a security incident to regulatory authorities, government...

Long Awaited HIPAA Round Two Audits Have Begun

Announced in the spring of 2014, scheduled to begin in late 2014, OCR announced this week that a second round of HIPAA Audits (following the original 2012 audits) has finally begun. I have written over the last two years that audits were imminent. I admit it felt like...