Health IT Security November 1, 2022
OCR created the video presentation to educate covered entities and answer common questions about recognized security practices under HITECH.
The HHS Office for Civil Rights (OCR) released an educational video presentation on recognized security practices (RSPs) under HITECH. Nick Heesters, senior advisor for cybersecurity at OCR, presented the video and addressed key industry questions about implementation and liability.
In January 2021, Congress enacted an amendment to the HITECH Act “to require the Secretary of Health and Human Services to consider certain recognized security practices of covered entities and business associates when making certain determinations, and for other purposes.”
The amendment directed covered entities to implement security controls based on either the National Institute of Standards and Technology (NIST) framework,...