Syllabus

1. What is risk analysis and how does it impact me?
   • HIPAA’s Security Management Process standard and its implementation specifications.
   • The relationship between HIPAA-compliant risk analysis and reduced liability risk.
   • The relationship between HIPAA-compliant risk analysis and ethical, professional practice as well as improved security for clients.
2. How and when do I perform a risk analysis?
   • Risk analysis guidance from the Center for Medicare and Medicaid Studies (CMS) and the National Institute for Standards and Technology (NIST.)
   • High-level best practices around risk analysis and how they relate to mental health practices.
3. What are the specific processes of the risk analysis model being presented?
   • Risk-based models of risk analysis and controls-based models.
   • Survey of implementation of a risk-based model using the free HIPAACOW tools and/or the Person Centered Tech proprietary tools with guidance on using them in the mental health practice context.
4. What do I do with the results of a risk analysis?
   • Interpreting the results.
   • Writing security policies and procedures.