Most healthcare security teams have spent close to two years hearing that a major rewrite of the HIPAA Security Rule is on its way, and many have reacted in one of two ways.
Some paused large security investments until the final text appears, on the reasoning that there is no point building to a draft. Others started rewriting policies line by line against the proposal, as though it were already law.
Neither approach holds up well, because the proposal is still unsettled in its details while much of what it describes is work that a regulated organization should be doing under the current rule anyway. [Read more…] about Preparing for the HIPAA Security Rule Update Before it is Final
