NIST has released an update to its guidance for implementing the security requirements for the Health Insurance Portability and Accountability Act…

← Back to Blog

NIST has released an update to its guidance for implementing the security requirements for the Health Insurance Portability and Accountability Act (HIPAA), NIST P 800-66r2.

Originally published back in 2008, requiring a refresh. Revision 2 looks like a overhaul of the original document NIST. Bringing revision 2 in line with other NIST security standards, coming at a time when the healthcare industry is facing a significant threat of cyber attacks, the theft of Healthcare records and the disruption of health services.

At first glance revision 2 has been aligned to regulatory updates, provides a significant update to risk management guidance, updated mappings to NIST CSF and 800-53r2 and updates the evaluation criteria to confirm conformity over the security of electronic Personal Health Information (ePHI). Updating the baseline to evaluate compliance over the security of ePHI.

Rachel V. Rose, JD, MBA and Ted Dziekanowski you will find its approach, very much in line with your thinking about the oversight, assurance and attestation of cybersecurity risk management within the healthcare sector.

Brian D. McCarthy Rich Waite, M.Ed. George Sawyer

Veritas GRC

#cybersecurity #cyberriskmanagement #hipaa #nist

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7164176572483104769