ABSTRACT

In this chapter, we will explain the dierences between security incident procedures and contingency plans, expand on what is required for these two standards by the Security Rule and more recent updates in the HITECH Act and Omnibus Rule, and provide some practical advice and checklists so you can ensure that your health care information systems are well protected from events such as hacker attacks, malware outbreaks, and natural disasters.