The Centers for Medicare and Medicaid Services (CMS) has recently published the sixth of a seven paper series designed to give HIPAA covered entities insight into the Security Rule. The paper entitled “Basics of Risk Analysis and Risk Management,” reviews security rule implementation specifications, the basic concepts of risk analysis and management and general steps to conduct assessments.

Topics previously published in this series are:

• Security 101 for Covered Entities
• Security Standards - Administrative Safeguards
• Security Standards - Physical Safeguards
• Security Standards - Technical Safeguards
• Security Standards - Organizational, Policies and Procedures, and Documentation Requirements

The Security Rule compliance deadline for small healthplans is April 20, 2006.

For more information on HIPAA, log on to www.preferredtherapy.com and click on HIPAA Updates in the Member Center. This will take you directly to the Center for Medicare and Medicaid website where a variety of HIPAA related information can be accessed such as: Upcoming Events, FAQS, Regulations and Standards, overviews on the National Provider Identifier, the latest in HIPAA news, Education Materials, HIPAA related links and more.

You may also access the Member Center and click on Discussion Forums, to post questions or to discuss a variety of topics including HIPAA.