Healthcare & Technology

Human Error and Cybersecurity Breaches in 2018

HIPAA Survival Guide Webinars now available online!

If you have missed one of our Webinars, I have great news - you can view them online at "Go to Stage." Each of the monthly Webinars will be recorded and uploaded So, no worries. Just select the Webinar you want to view at Go to Stage. Or, you may also view videos of HIPAA topics on YouTube's HIPAA Survival Guide Channel.

 

December 2018 HIPAA Survival Guide Webinar

 

 

 

 

 

 

December 2018

HIPAA Survival Guide® Webinar

  

Title:   HIPAA Risk Assessments Revisited

 

Description:  Although we previously said we would NOT have a Webinar in December, we see the need to revisit Risk Assessments. This webinar will address the Healthcare Industry's evolving understanding of Risk Assessments due to the 2018 MIPS Risk Assessment requirement.

 

Date: December 20, 2018

Time: 2:00 - 3:30 p.m. EST

 

Register here for the December Webinar

 

Click here to view other Free Webinars from the HIPAA Survival Guide.

 

HIPAA Survival Guide November Webinar!

HIPAA Survival Guide® Webinar      Title:  Compliance Repository: A Single Version of the Truth! Description:  Storing your Visible Demonstrable Evidence   Date: November 15, 2018 Time: 2:00 p.m. EST   Register here for the November Webinar

HIPAA Survival Guide Webinars Online!

Due to the high registration and attendance of HIPAA Survival Guide Webinars, we are now offering past and future webinar videos online!

Get your questions answered by attending LIVE webinars by signing up for our FREE Newsletter that provides Webinar registration information as well as articles on topics of interest.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

HIPAA Survival Guide® September 2018 Webinar

  

Description:  HIPAA Education: Learning HIPAA in an Attention Deficit Digital World!

 

September's webinar will describe and provide examples of how to quickly come up to speed on the HIPAA Regulations through HIPAA "Shorts!" It will also continue to explore the meta-concept of "How much HIPAA training is enough!" that was initiated and well-received in the August webinar.

Last month's newsletter and webinar (HIPAA Education: How much is enough?) explored this idea (Handouts can be obtained here). However, what we didn't make clear is that we will be exploring this idea over the next several months. It's a meta-concept. One newsletter and webinar is not nearly enough to cover the topic. Moreover, we intend for this exploration to be interactive. This is not a series of "lectures" but rather a series of interactive sessions with audience participation where we jointly and collaboratively iterate in an attempt to find an answer that approximate the reality for your specific organization. Each organization is different. This topic is the canonical example of a wicked problem. There is not a one-size-fits-all answer.

September's Webinar Date and Time, including Time Zone 

September 20, 2018 2:00 pm EST

 

 Register Here for the September Webinar 

 

New Products!

Business Partner Vetting  HIPAA Handbook: A Definitive Guide  Security Rule Training for Clinicians

Coming Soon!   EXPRESSO RELEASE 2.0   Privacy Rule Training for Clinicians Breach Notification Training for Clinicians HIPAA Training Shorts

Learning HIPAA in an Attention Deficit Digital World?

 

INTRODUCTION

Universally employees complain about not having enough training, or the right training, in just about any subject matter domain you can name. HIPAA is no different. We know! We have literally trained thousands of customers in HIPAA over the last 10 years, including most of our competitors. Having said that we still get the same comments: (1) it's too legalistic; (2) it's not dumbed down enough; (3) it's more for compliance officers than for clinicians; (4) it's too long, etc. Are these customers right? Yes and no. Why? Because it's impossible to design comprehensive training in a manner that will be best, or even satisfactorily suited, for all audiences. 

But do customers get significant value from our training? Absolutely, that's why they buy. This newsletter only uses our training as a point of reference. We are responding to the market by adding a series of HIPAA Training Modules for Clinicians. But that's also not the subject matter of this newsletter. 

 

What this newsletter wants to explore is the question of learning "modalities." We have all heard of them: (1) visual learners; (2) auditory learners; (3) tactile/kinesthetic learners, etc. These have been explored by researchers in breadth and depth for years now.

However, what we want to explore in this newsletter, and in a series of upcoming products, is a different modality that we call "Shorts" but they go by a number of different monikers, including but not limited to the following: (1) bite-size learning modules; (2) short learning modules; and (3) micro-learning. The essence of Shorts is to take complex subject matter domains such as the HIPAA Privacy, Security and Breach Notification Rules, and break them up into smaller pieces to make them more accessible; to make them more digestible; to make them "fill in the learning metaphor de jure."

The most interesting question for us (it's all fascinating) is what is the core learning dynamic (i.e. modality) in play? Why would taking an hour-long course and breaking it down in 15 minutes segments make it more accessible? Why would a 15-minute "Concept Short" broken down into 5 three minute "Idea Shorts" improve learning? Moreover what the difference between a "Concept Short" and an "Idea Short" and why should it matter. Who defined this grammar and why should we pay attention to these distinctions?

The rest of the article will attempt to answer these questions with real-world examples that hopefully most of you can relate to. For example, assume that our Privacy Rule Training takes about an hour for the on-demand video to play. Assume further that you wanted to take the "open powerpoint" exam after watching the video. The exam is comprised of 20 True/False questions with a passing grade of 70. The latter being your organization's policy. Assume further, that as a job requirement (i.e. a term and condition in your employment contract) you needed to take all HIPAA training on your own time. So this hypothetical assumes that you need two hours time to get through the Privacy Rule.

Finally assume that you are a recently graduated nurse, 27 years old, with a husband (or wife) and a small child at home. In other words, you are crazy busy.

 

THE ROAD AHEAD

We believe that the answer to these questions lie more with the attention deficit digital world that we all now inhabit than with any significant breakthrough vis-à-vis a new learning modality (e.g. micro-learning). Millennials, especially if you believe the literature, prefer to learn via "Shorts" for the same reason that they prefer to shop online (something most of us now prefer); because it saves time.

You may not have two hours to dedicate to learning the Privacy Rule in a comprehensive overview including taking a 20 question T/F test. However, you (i.e. the hypothetical nurse above) may have 15 minutes a night that you can squeeze in to watch a Privacy Rule "concept short." Watch all four concept shorts and you are ready to take the exam! Learning a little bit at a time takes into consideration the fact that none of us have enough time to do the necessary tasks we need to do, let alone extra things we might want to do.

If you come home from a full day's work, fighting traffic, and want to spend some quality time with your spouse and children then there's very little time left for anything else. Remember that "quality time," as used in this example, does not include preparing or "fetching" dinner, helping the kids with homework or taking them to baseball practice. OK everyone in the audience has time commitments that differ from our hypothetical nurse, but the story remains the same. For other reasons, you still do not have enough time in the day to complete all the things you need to get done.

So much for work-life balance. The majority of knowledge workers spend some time at night and weekends just to keep up. It's the 24/7 365 connected world that we live in that forces this reality upon us. Now having said that, we do not want to be dismissive of "Shorts" as a new learning modality. Far from it. None of us at 3Lions Publishing have PHDs in education nor have we performed an exhaustive review of the literature. There may be something that cognitively improves the learning process if shorts are used. We will leave that to the academics to sort out.

What we know for a fact, is that the marketplace is demanding this type of training. We believe that the marketplace, in the aggregate, has figured something out that it will take academics years to corroborate (and to supply a theory that underpins it). Therefore having trained thousands in the HIPAA regulations, we intend to evolve our training into shorter and shorter "chunks" that we know are more digestible for an attention deficit consumer. However, we do not believe that these types of training are mutually exclusive. Quite the opposite.

CONCLUSION

We look forward to rolling out our "Shorts" with a more interactive webinar experience that we pioneered last month. We will have more situational training exercises. We will focus more on the conveyance of "news that you can use" in "bite-size chunks." We intend to take the lessons learned from training thousands on HIPAA to innovate how HIPAA (and other compliance regimes) are taught. We hope that you join us on this journey.

 

Examples of HIPAA Survival Guide Training

Foundational Training for Other Staff The following list of training modules is recommended for other workforce members, including the executive management team.   Privacy Rule Training  Security Rule Training  Breach Notification Training  Social Media Training  Mobile Devices Training I have been asked if there is a HIPAA LITE for Business Associates, and the answer is No! Business Associates need to be as aware of the regulations as Covered Entities if they are "touching PHI." That said, we also provide specialized training for Business Associates in situations where their needs differ from Covered Entities (see below). Business Associate Training Security Rule for Business Associates

 

Specific Training for Compliance Officers   In addition to the training above, compliance officers should consider taking the following training classes to obtain their certification. We offer a HIPAA Certified Professional ("HCP") certification after taking an exam that covers material from the training modules listed below. Certification Training Modules 1.    Breach Notification 2.    Business Associate 3.    Audit 4.    Breach Notification Audit 5.    Privacy Rule Audit 6.    Security Rule Audit 7.    Documentation*  8.    HITECH Act   9.    Omnibus Rule 10.  Privacy Rule 11.  Security Rule 12.  Risk Assessment 13.  Risk Management 14.  Social Media Best Practices 15.  Mobile Best Practices We also recommend that Compliance Officers who have our HIPAA Survival Guide Subscription Plan, take advantage of a pre-recorded four-part training series entitled: "Surviving a HIPAA Audit." Subscribers may log in to the Compliance Hub Member website to: Download the HIPAA Handbook: A Definitive Guide of Articles that contains over 400 pages of articles with an index of topics, and Saved Webinar Recordings. Non-subscribers can download the HIPAA Handbook: A Definitive Guide of Articles from the HIPAA Survival Guide Store. For some, the amount of information may be overwhelming, but just like HIPAA, you bite off a piece of the elephant one at a time.

 

Specialty Workforce Training   Finally, we recommend that staff who are responsible for items in the list below, and Compliance Officers and/or Executive Officers become knowledgeable on the following topics: Training for workforce members that are designated as "point persons" for the Patient's Bill of Rights; these are sections 164.520 through 164.528 of the Privacy Rule.  The regulations require that individuals "sign off" on certain processes pertaining to providing access to a patient's PHI;  Helping a patient amend their PHI;  Distributing the notice of privacy practices, etc. Training for individuals that handle Privacy Rule requests for authorizations, restrictions, etc. Training for personnel assigned the responsibility of tracking security incidents. Training for information technology personnel that are required to audit information systems containing PHI. Training for personnel that are assigned the responsibility for disposing of PHI. This is not an exhaustive list. The "final" list of training will depend on your operational environment, the size and complexity of your organization, and the resources you have available, etc. One thing is certain, look for training that provides answers, not just a description of the problems.

 

HOW TO COMPLY WITH HIPAA

    

At 3Lions Publishing, Inc. our mission is to provide clients with:

• Premium Compliance Products,
• Education,
• Free Monthly Webinars, 
• Newsletter Articles on HIPAA and regulatory topics, as well as 
• "High Touch" LIVE assistance with Products for Risk Assessment and Remediation. 

We do NOT charge extra for compliance support like many of our competitors. The cost for your LIVE assistance is included in your Subscription purchase. 

A full 360-degree circle of Risk Assessment and Remediation products are provided in 3Lions Publishing Inc.'s 

HIPAA and Expresso Subscription Plan. 

 

The Subscription Plan includes  Expresso®, the Risk Assessment "SaaS" based software, over 30+ compliance and remediation products, and training videos that help Covered Entities and Business Associates understand how to implement the necessary Controls to be in compliance with HIPAA regulations. Our LIVE "High Touch" Assistance helps you "get it done" fast!

 

Our many Training products describe various aspects of the regulations as well as demonstrations of how to use Expresso and associated compliance tools. As part of the Subscription Plan we also provide certification for clients seeking designation as a HIPAA Certified Professional ("HCP").

 

A "Crosswalk" between Expresso Risks and Remediation tools provides easy access to model policies, procedures and tracking mechanisms for compliance. 

 

FREE Monthly newsletters and webinars provide education on topics of regulatory concern. Missed one? Webinars and articles are posted to the HIPAA Survival Guide Store Website for future reference.

 

So, why are we sharing this information in our Newsletter? Education, Education, Education. Stay tuned not only for Product updates but also for new capabilities and value offered to our elite group of clients. Save time and money with our high quality, bargain Subscription Plan! 

 

Or, take advantage of our FREE 15 day trial of Expresso to complete your Risk Assessment!

 

Questions? Please call or write using the contact information below.

 

Email:     Support@3Lionspublishing.com

Phone:   (800) 516-7903    

 

HIPAA Help

What is the new LinkedIn GDPR Survival Guide?

What is the HIPAA Survival Guide® Subscription Plan and what does it include?

What is  Expresso® The Risk Assessment Express?

What is The Contingency Framework? 

HIPAA Requirements for Cloud, Social Media, and Mobile including Policies and Procedures

HIPAA Requirements for Breach Notification including Policies and Procedures

HIPAA Requirements for a  Business Associate Agreement including the essential terms of the agreement

How to prepare for a HIPAA Security Rule Audit  

How to prepare for a HIPAA Privacy Rule Audit  

How to prepare for a HIPAA Breach Notification Audit  

How to prepare for a HIPAA Risk Assessment Audit  

 

For HIPAA Help send us an Email at

support@3lionspublishing.com

 

Included in the HIPAA Survival Guide® Subscription Plan  New Products! Business Partner Vetting HIPAA Handbook: A Definitive Guide Security Rule Training for Clinicians EXPRESSO RELEASE 2.0 Coming Soon!  HIPAA Training Shorts! Expresso® HIPAA Subscription Plan Expresso® Monthly Plan GDPR Compliance Products  Pulse™  The Cloud & HIPAA Training Phishing & Ransomware Training Contingency Framework Cloud, Social Media, and Mobile Checklist Model Mobile Policy  Privacy Rule Checklist  Model Privacy Rule Policy Model Notice of Privacy Practices  Security Rule Checklist  Model Security Rule Policy  Checklists Combo Package  Breach Notification Framework

Breach Notification Policy Business Associate Agreement  Business Associate-to-Business Associate Agreement  Security Rule for Business Associates  HIPAA Frameworks Combo  HIPAA Certification Training  HIPAA Audit Preparation Training HIPAA Security Rule Audit Preparation Training HIPAA Privacy Rule Audit Preparation Training HIPAA Breach Notification Rule Audit Preparation Training HIPAA Audit Preparation Training Suite HITECH Act Training Security Rule Training Privacy Rule Training Breach Notification Training Business Associates Training HITECH Core Training Combo  Omnibus Rule Training  Mobile Devices Training Social Media Training Risk Assessment Training Risk Management Program Training Agile Compliance Training

 

Protect Your Practice and Your Business

 

Click Here for HIPAA Survival Guide® Subscription Plan Testimonials   Take advantage of our Heartbeat™ and Pulse™  offerings with The HIPAA Survival Guide® Subscription Plan With Expresso®

HIPAA Survival Guide® FREE Webinar

  

Description:  HIPAA Education: Learning HIPAA in an Attention Deficit Digital World!

 

September's webinar will describe and provide examples of how to quickly come up to speed on the HIPAA Regulations through HIPAA "Shorts!" It will also continue to explore the meta-concept of "How much HIPAA training is enough!" that was initiated and well-received in the August webinar.

Last month's newsletter and webinar (HIPAA Education: How much is enough?) explored this idea (Handouts can be obtained here). However, what we didn't make clear is that we will be exploring this idea over the next several months. It's a meta-concept. One newsletter and webinar is not nearly enough to cover the topic. Moreover, we intend for this exploration to be interactive. This is not a series of "lectures" but rather a series of interactive sessions with audience participation where we jointly and collaboratively iterate in an attempt to find an answer that approximate the reality for your specific organization. Each organization is different. This topic is the canonical example of a wicked problem. There is not a one-size-fits-all answer.

September's Webinar Date and Time, including Time Zone 

September 20, 2018 2:00 pm EST

 

 Register Here for the September Webinar

 

What is the HIPAA Survival Guide's Mission?

Public Webinar - HIPAA Education: How much is enough?

With over 200 registrants, August 16th was a flagship webinar: HIPAA Education: How much training is enough? We also tested the use of a polling process in the webinar to engage attendees.  

Those who participated later commented that the opportunity to have practical examples of how one might respond to a HIPAA Incident was valuable. The practical nature of the poll and subsequent discussions with Q&A enabled individual questions to be addressed from a legal perspective. Participants found that legal explanations for their questions gave a better understanding of how the HIPAA Regulations can be put to use in various situations.

Future webinars will be presented in this manner, so we hope you'll join us by signing up for the FREE HIPAA Survival Guide Newsletter to be notified of pending webinars that are generally held on the 3rd Thursday of each month.

Due to the high number of registrants and some who were unable to attend, we are making this Video public. Handouts and the Webinar Video can be downloaded from the links below.

1) Webinar Handout

2) Webinar Video: HIPAA Education: How much training is enough?

 

Don't forget to sign up for the Newsletter if you haven't already. You will receive monthly articles on HIPAA and Compliance topics as well as notification of upcoming FREE Webinars.

HIPAA Education: How much is enough?

Join us this month for a free webinar about HIPAA training.

 

Description: HIPAA Education: How much training is enough?

 

This webinar will describe How much and what type of HIPAA education is well suited for staff and other workforce members?

 

Date and Time, including Time Zone 

August 16, 2018 2:00 pm EST

 

Register Here for the FREE August Webinar 

 

Also, if you're interested in future webinars from the HIPAA Survival Guide, register for free Newsletters here.