With all the anticipation and confusion about the just released MU rules and requirements for providers in 2015, one thing remains – all providers attesting to MU must perform their annual Security Risk Analysis (SRA) before the end of the calendar year. This deadline is separate from the February 29, 2016 deadline for 2015 MU.
To raise the stakes a bit, a recent report from HHS Office of the Inspector General (OIG) called on the HHS Office of Civil Rights (OCR) to strengthen enforcement and increase oversight of HIPAA. This is likely to mean a permanent OCR audit program in 2016 and, consequently, greater risk to provider organizations of all sizes.
What Is a Security Risk Analysis?
Under Meaningful Use, providers must annually perform and document a thorough SRA as outlined under the HIPAA security rules. In the event of an MU audit, providers who fail to produce adequate SRA documentation are faced with giving back MU incentives and subject to the MU payment adjustment. Additionally, practices face potential fines under HIPAA if they fail to meet the SRA requirement.
How Can NextGen Healthcare Help?
NextGen Healthcare has partnered with HIPAA One® to offer a comprehensive SRA solution that meets MU and HIPAA requirements while helping you protect patient health information and reduce risk to your organization.
HIPAA One is the most comprehensive and affordable HIPAA compliant solution in the industry. The cloud-based HIPAA One tool walks you through a standards-based process to gather information, identify risks and map out a corrective action plan. Best of all, the end result is a comprehensive, professional, and compliant SRA document for your records and for use in the event of an audit.
To help you get started, NextGen Healthcare offers service options to fit the specific needs of your practice, from basic HIPAAOne training to hands-on assistance in building a comprehensive HIPAA compliance program.
Ready to learn more?
To learn more about this simplified SRA solution, join us for a free educational webinar and demo of HIPAA One by registering for an upcoming webinar.
Wednesday, October 21, 3PM EDT
Call-in toll-free number: 1-(855) 818-9814 (US)
Conference Code: 954 910 8893