![Thomas Fox](https://www.techtidbit.com/wp-content/uploads/2014/05/Thomas_Fox_514_3.jpg)
HIPAA (the Health Insurance Portability and Accountability Act) and HITECH (the Health Information Technology for Economic and Clinical Health act) have been around for quite some time. Even so, many companies covered by these laws are way behind when it comes to implementation. When you really think about it, even companies not covered by these laws should have the requisite policies and procedures in place.
Access Control Policy
How are users granted access to programs, client data and equipment? Also includes how administrators are notified to disable accounts.
Security Awareness Training
Organizations must ensure regular training of employees regarding security updates and what to be aware of. You must also keep an audit trail of reminders and communications in case you’re audited.
[Read more…] about IT Policies Companies Under HIPAA Regulations Must Have