HITECH Act Security Policy Solutions

Health Information Technology for Economic and Clinical Health Act

In February 2009 the US Congress adopted the Health Information Technology for Economic and Clinical Health Act (HITECH Act). Among the many requirements and changes, HITECH significantly expands the categories of entities subject to HIPAA, and increases the obligations of such entities. The Act also increases resources and methods of enforcement and increases penalties for noncompliance with HIPAA. This law presents a significant compliance challenge for any organization that processes electronic health information.

Information Security Policies and HITECH

According to the HIPAA final security and privacy rules, an organization must develop policies and procedures to safeguard private health information. Beyond simply writing policies, however, organizations must establish an environment of information control that includes risk assessments, security awareness training, personnel security, incident response and disaster recovery. Information Shield publications will save organizations hundreds of development hours by providing a complete library of policies and standards that cover each of these critical areas.

Information Security Policies Made Easy by security policy expert Charles Cresson Wood, CISA, CISSP, is the definitive resource for information security policies. Includes over 1400 information security policies covering all ISO 17799 information security domains. Used by over 25% of the Fortune 100.

  » Learn More » Request a Sample

The PolicyShield Information Security Policy Subscription includes all of the policies within ISPME with regular updates based on the latest threats, technologies and regulatory changes. Let our experts monitor the latest trends and write the policies you need when you need them.

  » Learn More » Request a Sample

The Privacy Management Toolkit by Rebecca Herold, CISSP, CISM provides practical advice, time-saving tools, templates and policies to help create and manage a data privacy governance program based on OECD Fair Information Principles. Contains a Privacy Breach Calculator, complete Privacy Impact Assessment (PIA) and much more!

» Learn More  » Request a Sample