Practical Guide to HIPAA Privacy and Security Compliance

Kevin Beaver is an independent information security consultant, writer, professional speaker, and expert witness with Atlanta, Georgia based Principle Logic, LLC. He has worked in IT since 1989 and specializes in performing information security assessments for corporations, security product vendors, independent software developers, universities, government agencies, and nonprofit organizations. Before starting his information security consulting practice in 2001, Kevin served in various information technology and security roles for several health care, e-commerce, financial, and educational institutions.Kevin has appeared on CNN as an information security expert and has been quoted in The Wall Street Journal, Entrepreneur, Fortune Small Business, Men's Health, Women's Health, Woman's Day, and Inc. Magazine. His work has also been referenced by the PCI Security Standards Council in their PCI DSS Wireless Guidelines. He has given and participated in hundreds of highly rated presentations, panel discussions, seminars, and webcasts on information security and compliance.Kevin has authored or coauthored 11 information security books, including Hacking For Dummies and Hacking Wireless Networks For Dummies (Wiley) as well as Implementation Strategies for Fulfilling and Maintaining IT Compliance(Realtimepublishers.com). He has written dozens of whitepapers and hundreds of articles and guest blog posts, and he is a regular contributor to SearchSecurity.com, SearchEnterpriseDesktop.com, SearchWindowsServer.com, and Security Technology Executivemagazine.Kevin is the creator and producer of the Security On Wheelsaudiobooks, which provide security learning for IT professionals on the go (http://www.securityonwheels.com) and its associated blog (http:// www.securityonwheels.com/blog). He also covers information security and rela

Praise for the New Edition:The HIPAA regulations are transforming how providers and insurers think about the individually identifiable health information they create and receive every minute of every day. ... There is a potential for serious harm to service levels and even to patient health if misunderstandings as to the dictates of these regulations choke off the exchange of patient-health information. This guide is a good step toward erasing many of those misunderstandings. I commend the authors for their fine efforts at translating a difficult subject into practical terms.—Mark Lutes, Chairman, Epstein Becker Green, Washington, DCPraise for the Bestselling First Edition:The book's main strength is its abundant and varied content. It thoroughly describes the main provisions of HIPAA's security and privacy requirements using actual language from the legislation interspersed with the authors' commentary. This format…helpfully guides readers through the labyrinthine HIPAA requirements.—Scott Forbes, MicrosoftRebecca and Kevin have compiled a wealth of knowledge in an easy-to-read, conversational style. This book is packed with useful facts and practical tips that grabs and keeps your attention as though you are listening to the authors in your own living room. The astute reader will keep a pad of paper and a pile of 'sticky notes' handy. You will no doubt come back to this valuable resource over and over again!Michael J. Corby, CCP, CISSP, President and CEO, M. Corby & Associates, Inc.This is a very comprehensive view of HIPAA privacy and security compliance which provides a pragmatic, step by step methodology for understanding and complying with the regulation. The practical checklists, the quizzes whichcan be used in HIPAA awareness programs, and the pointers to valuable resources are all added benefits.Micki Krause, CISSP, Chief Information Security Officer, Pacific Life Insurance

• HIPAA Essentials. HIPAA Privacy Rule. HIPAA Security Rule. Covered Entity Issues. HIPAA Technology Considerations. Managing Ongoing HIPAA Compliance. Appendices: Enforcement and Sanctions. HIPAA Glossary. Model Incident and Privacy Response Procedures. HIPAA Resources.