WiHPCA 2024 Webinar Series: ePHI and Risks: Keeping Them at Reasonable and Appropriate Levels

Session Description:

HIPAA requires organizations to complete risk analyses, including assessing all potential risks and vulnerabilities to the electronic protected health information (ePHI) held by them. In addition, periodic technical and nontechnical evaluations must be done in response to environmental or operational changes that affect the security of ePHI. Finally, as part of the HIPAA risk management requirements, security measures must be put in place to sufficiently reduce risks and vulnerabilities to a reasonable and appropriate level. This session will break down these requirements to help you understand what efforts to put in place to implement an effective risk analysis and risk management program in your organization.

Meet Our Presenter:

Holly Schlenvogt, MSH, CPM

Privacy & Security Consultant/Owner, HRT Consulting, LLC

Holly is an independent privacy and security consultant who has worked with the HIPAA privacy and security rules for over 20 years. She helps organizations understand and meet these requirements in an organized and straightforward way. Holly has extensive experience facilitating security risk analyses and privacy compliance assessments as well as developing customized policies, procedures, and education programs. She has actively participated in numerous state and national networking groups and was the original primary author of the HIPAA COW Risk Analysis & Risk Management Toolkit. She is a HIPAA COW Board of Directors Member (past president), co-chair of the Moo and Chew: Operations and Risk Management Networking Groups, and member of the Privacy and HealthCare IT Networking Groups.