Re: security risk assessment for meaningful use

[Guest guest]

You have to do it, but there should be a Extension Service in your area. They

are mandated by the feds to assist with MU. We used them and they did this part

for free, as well as the consultation. For the first round, you only need to say

you have looked at it basically, if you pay someone it can be expensive, but you

will get your money back.

________________________________________

From:

[ ] On Behalf Of Margaret Coughlan

[drmarge@...]

Sent: Wednesday, February 15, 2012 7:03 AM

To:

Subject: security risk assessment for meaningful use

I am in the training/transitioning phase to go live with Athena Health next

month. I have not done anything about meaningful use before now. They have told

me I need to do a security risk assessment thing as part of that. They have a

company that you can use/pay to help do that. I know many of you have already

attested. What did you do about this security thing? Did you do it on your own?

Did you hire someone to help? What exactly is involved? How difficult is it?

THanks for any feedback,

Margaret Coughlan

[Guest guest]

Here is a good Q & A about the measure: http://www.hitechanswers.net/meaningful-use-hipaa-and-security-risk-analysis/

ONC has a guide for small practices to follow, which is what we did.  It's called " Reassessing Your Security Practices in a Health IT Environment. " . Sorry, but I can't get the link to coy and paste from the PDF on my iPad.  But if you go to the QA above, then there is a link on that to ONC, and the link is on p. 8 of the draft guidance on risk analysis.

Pratt

 

I am in the training/transitioning phase to go live with Athena Health next month. I have not done anything about meaningful use before now. They have told me I need to do a security risk assessment thing as part of that. They have a company that you can use/pay to help do that. I know many of you have already attested. What did you do about this security thing? Did you do it on your own? Did you hire someone to help? What exactly is involved? How difficult is it?

THanks for any feedback,

Margaret Coughlan

[Guest guest]

My REC did that 60 page monster for free for me. Contact your REC.

To: " " < > Sent: Wednesday, February 15, 2012 10:00 AMSubject: Re: security risk assessment for meaningful use

Here is a good Q & A about the measure: http://www.hitechanswers.net/meaningful-use-hipaa-and-security-risk-analysis/

ONC has a guide for small practices to follow, which is what we did. It's called "Reassessing Your Security Practices in a Health IT Environment.". Sorry, but I can't get the link to coy and paste from the PDF on my iPad. But if you go to the QA above, then there is a link on that to ONC, and the link is on p. 8 of the draft guidance on risk analysis. Pratt

I am in the training/transitioning phase to go live with Athena Health next month. I have not done anything about meaningful use before now. They have told me I need to do a security risk assessment thing as part of that. They have a company that you can use/pay to help do that. I know many of you have already attested. What did you do about this security thing? Did you do it on your own? Did you hire someone to help? What exactly is involved? How difficult is it?THanks for any feedback,Margaret Coughlan

[Guest guest]

Rec is the way to goAdolfo E. Teran, MD

I am in the training/transitioning phase to go live with Athena Health next month. I have not done anything about meaningful use before now. They have told me I need to do a security risk assessment thing as part of that. They have a company that you can use/pay to help do that. I know many of you have already attested. What did you do about this security thing? Did you do it on your own? Did you hire someone to help? What exactly is involved? How difficult is it?

THanks for any feedback,

Margaret Coughlan

=

[Guest guest]

Do you have to pay the REC at all? Forgive my ignorance. Thank you everyone for

your help. I love how this group does not let us feel like we are alone out

here!

Margaret

Re: security risk assessment for meaningful use

 

Rec is the way to go

Adolfo E. Teran, MD

On Feb 15, 2012, at 9:03 AM, Margaret Coughlan < drmarge@... > wrote:

 

I am in the training/transitioning phase to go live with Athena Health next

month. I have not done anything about meaningful use before now. They have told

me I need to do a security risk assessment thing as part of that. They have a

company that you can use/pay to help do that. I know many of you have already

attested. What did you do about this security thing? Did you do it on your own?

Did you hire someone to help? What exactly is involved? How difficult is it?

THanks for any feedback,

Margaret Coughlan

=

[Guest guest]

Not always.  Some states RECs are not as helpful.It's worth checking though.BP

 

Rec is the way to goAdolfo E. Teran, MD

 

I am in the training/transitioning phase to go live with Athena Health next month. I have not done anything about meaningful use before now. They have told me I need to do a security risk assessment thing as part of that. They have a company that you can use/pay to help do that. I know many of you have already attested. What did you do about this security thing? Did you do it on your own? Did you hire someone to help? What exactly is involved? How difficult is it?

THanks for any feedback,

Margaret Coughlan

=

[Guest guest]

All fees are waived if you already have your electronic medical record.

To: Sent: Wednesday, February 15, 2012 1:42 PMSubject: Re: security risk assessment for meaningful use

Do you have to pay the REC at all? Forgive my ignorance. Thank you everyone for your help. I love how this group does not let us feel like we are alone out here!Margaret Re: security risk assessment for meaningful use Rec is the way to go Adolfo E. Teran, MD On Feb 15, 2012, at 9:03 AM, Margaret Coughlan < drmarge@...

> wrote: I am in the training/transitioning phase to go live with Athena Health next month. I have not done anything about meaningful use before now. They have told me I need to do a security risk assessment thing as part of that. They have a company that you can use/pay to help do that. I know many of you have already attested. What did you do about this security thing? Did you do it on your own? Did you hire someone to help? What exactly is involved? How difficult is it? THanks for any feedback, Margaret Coughlan =

[Guest guest]

Will the REC  continue to be no cost for phase  II ?

 

All fees are waived if you already have your electronic medical record.

To: Sent: Wednesday, February 15, 2012 1:42 PM

Subject: Re: security risk assessment for meaningful use

 

Do you have to pay the REC at all? Forgive my ignorance. Thank you everyone for your help. I love how this group does not let us feel like we are alone out here!Margaret Re: security risk assessment for meaningful use

  Rec is the way to go Adolfo E. Teran, MD On Feb 15, 2012, at 9:03 AM, Margaret Coughlan < drmarge@...

> wrote:   I am in the training/transitioning phase to go live with Athena Health next month. I have not done anything about meaningful use before now. They have told me I need to do a security risk assessment thing as part of that. They have a company that you can use/pay to help do that. I know many of you have already attested. What did you do about this security thing? Did you do it on your own? Did you hire someone to help? What exactly is involved? How difficult is it?

THanks for any feedback, Margaret Coughlan =

[Guest guest]

I was told yes but that may be because I am already on board. Nor do I know if there are regional differences. To: Sent: Thursday, February 16, 2012

12:17 AM Subject: Re: security risk assessment for meaningful use

Will the REC continue to be no cost for phase II ?

All fees are waived if you already have your electronic medical record.

To: Sent: Wednesday, February 15, 2012 1:42 PM

Subject: Re: security risk assessment for meaningful use

Do you have to pay the REC at all? Forgive my ignorance. Thank you everyone for your help. I love how this group does not let us feel like we are alone out here!Margaret Re: security risk assessment for meaningful use

Rec is the way to go Adolfo E. Teran, MD On Feb 15, 2012, at 9:03 AM, Margaret Coughlan < drmarge@...

> wrote: I am in the training/transitioning phase to go live with Athena Health next month. I have not done anything about meaningful use before now. They have told me I need to do a security risk assessment thing as part of that. They have a company that you can use/pay to help do that. I know many of you have already attested. What did you do about this security thing? Did you do it on your own? Did you hire someone to help? What exactly is involved? How difficult is it?

THanks for any feedback, Margaret Coughlan =

[Guest guest]

As long as we belong to our local REC (free for primary care), we get

discounts on anything we purchase from e-MDs,since they are a

" preferred vendor. "

Pratt

> not sure why you would need them for year two.

>

> Can you attest a year from the first attest?

> ________________________________________

> From:

[ ] On Behalf Of Myria [myriaemeny@...]

> Sent: Friday, February 17, 2012 6:20 AM

> To:

> Subject: Re: security risk assessment for meaningful

use

>

> I was told yes but that may be because I am already on board. Nor do I know

if there are regional differences.

>

>

> To:

> Sent: Thursday, February 16, 2012 12:17 AM

> Subject: Re: security risk assessment for meaningful

use

>

>

> Will the REC continue to be no cost for phase II ?

>

> On Wed, Feb 15, 2012 at 2:46 PM, Myria

> wrote:

>

> All fees are waived if you already have your electronic medical record.

>

> >

> To:

<mailto: \

>

> Sent: Wednesday, February 15, 2012 1:42 PM

>

> Subject: Re: security risk assessment for meaningful

use

>

>

> Do you have to pay the REC at all? Forgive my ignorance. Thank you everyone

for your help. I love how this group does not let us feel like we are alone out

here!

> Margaret

>

> Re: security risk assessment for meaningful

use

>

>

>

> Rec is the way to go

>

> Adolfo E. Teran, MD

>

> On Feb 15, 2012, at 9:03 AM, Margaret Coughlan <

drmarge@...<mailto:drmarge%40pol.net> > wrote:

>

>

>

> I am in the training/transitioning phase to go live with Athena Health next

month. I have not done anything about meaningful use before now. They have told

me I need to do a security risk assessment thing as part of that. They have a

company that you can use/pay to help do that. I know many of you have already

attested. What did you do about this security thing? Did you do it on your own?

Did you hire someone to help? What exactly is involved? How difficult is it?

> THanks for any feedback,

> Margaret Coughlan

>

> =

>

>

>

>

>

>

>

>

>

>

> ------------------------------------

>

>

[Guest guest]

Did you get 7.2 yet? Have you installed it? Seems like we just got 7.1.98

________________________________________

From:

[ ] On Behalf Of Pratt

[kpratt.1022@...]

Sent: Friday, February 17, 2012 5:04 PM

To:

Subject: Re: security risk assessment for meaningful use

As long as we belong to our local REC (free for primary care), we get

discounts on anything we purchase from e-MDs,since they are a

" preferred vendor. "

Pratt

On Feb 17, 2012, at 3:55 PM, " Kennedy, Jim "

<jim.kennedy@...<mailto:jim.kennedy%40ucdenver.edu>> wrote:

> not sure why you would need them for year two.

>

> Can you attest a year from the first attest?

> ________________________________________

> From:

<mailto:%40yahoogroups.c\

om>

[ <mailto:%40yahoogroups.\

com>] On Behalf Of Myria [myriaemeny@...<mailto:myriaemeny%40yahoo.com>]

> Sent: Friday, February 17, 2012 6:20 AM

> To:

<mailto:%40yahoogroups.c\

om>

> Subject: Re: security risk assessment for meaningful

use

>

> I was told yes but that may be because I am already on board. Nor do I know if

there are regional differences.

>

> From:

<edwardsronaldj@...<mailto:edwardsronaldj%40gmail.com>>

> To:

<mailto:%40yahoogroups.c\

om>

> Sent: Thursday, February 16, 2012 12:17 AM

> Subject: Re: security risk assessment for meaningful

use

>

>

> Will the REC continue to be no cost for phase II ?

>

> On Wed, Feb 15, 2012 at 2:46 PM, Myria

<myriaemeny@...<mailto:myriaemeny%40yahoo.com><mailto:myriaemeny@...\

<mailto:myriaemeny%40yahoo.com>>> wrote:

>

> All fees are waived if you already have your electronic medical record.

>

> From: Margaret Coughlan

<drmarge@...<mailto:drmarge%40pol.net><mailto:drmarge@...<mailto:drmarge\

%40pol.net>>>

> To:

<mailto:%40yahoogroups.c\

om><mailto: <mailto:%40ya\

hoogroups.com>>

> Sent: Wednesday, February 15, 2012 1:42 PM

>

> Subject: Re: security risk assessment for meaningful

use

>

>

> Do you have to pay the REC at all? Forgive my ignorance. Thank you everyone

for your help. I love how this group does not let us feel like we are alone out

here!

> Margaret

>

> Re: security risk assessment for meaningful

use

>

>

>

> Rec is the way to go

>

> Adolfo E. Teran, MD

>

> On Feb 15, 2012, at 9:03 AM, Margaret Coughlan <

drmarge@...<mailto:drmarge%40pol.net><mailto:drmarge%40pol.net> > wrote:

>

>

>

> I am in the training/transitioning phase to go live with Athena Health next

month. I have not done anything about meaningful use before now. They have told

me I need to do a security risk assessment thing as part of that. They have a

company that you can use/pay to help do that. I know many of you have already

attested. What did you do about this security thing? Did you do it on your own?

Did you hire someone to help? What exactly is involved? How difficult is it?

> THanks for any feedback,

> Margaret Coughlan

>

> =

>

>

>

>

>

>

>

>

>

>

> ------------------------------------

>

>

[Guest guest]

Yes, but since we don't control our servers any more (using ASP

through Tangible Solutions), we don't control when the update is

installed. I got it about a week ago, which typically means we'll see

the update in another 2-3 weeks.

Pratt

> Did you get 7.2 yet? Have you installed it? Seems like we just got 7.1.98

> ________________________________________

> From:

[ ] On Behalf Of Pratt

[kpratt.1022@...]

> Sent: Friday, February 17, 2012 5:04 PM

> To:

> Subject: Re: security risk assessment for meaningful

use

>

> As long as we belong to our local REC (free for primary care), we get

> discounts on anything we purchase from e-MDs,since they are a

> " preferred vendor. "

>

> Pratt

>

> On Feb 17, 2012, at 3:55 PM, " Kennedy, Jim "

<jim.kennedy@...<mailto:jim.kennedy%40ucdenver.edu>> wrote:

>

>> not sure why you would need them for year two.

>>

>> Can you attest a year from the first attest?

>> ________________________________________

>> From:

<mailto:%40yahoogroups.c\

om>

[ <mailto:%40yahoogroups.\

com>] On Behalf Of Myria [myriaemeny@...<mailto:myriaemeny%40yahoo.com>]

>> Sent: Friday, February 17, 2012 6:20 AM

>> To:

<mailto:%40yahoogroups.c\

om>

>> Subject: Re: security risk assessment for meaningful

use

>>

>> I was told yes but that may be because I am already on board. Nor do I know

if there are regional differences.

>>

>> From:

<edwardsronaldj@...<mailto:edwardsronaldj%40gmail.com>>

>> To:

<mailto:%40yahoogroups.c\

om>

>> Sent: Thursday, February 16, 2012 12:17 AM

>> Subject: Re: security risk assessment for meaningful

use

>>

>>

>> Will the REC continue to be no cost for phase II ?

>>

>> On Wed, Feb 15, 2012 at 2:46 PM, Myria

<myriaemeny@...<mailto:myriaemeny%40yahoo.com><mailto:myriaemeny@...\

<mailto:myriaemeny%40yahoo.com>>> wrote:

>>

>> All fees are waived if you already have your electronic medical record.

>>

>> From: Margaret Coughlan

<drmarge@...<mailto:drmarge%40pol.net><mailto:drmarge@...<mailto:drmarge\

%40pol.net>>>

>> To:

<mailto:%40yahoogroups.c\

om><mailto: <mailto:%40ya\

hoogroups.com>>

>> Sent: Wednesday, February 15, 2012 1:42 PM

>>

>> Subject: Re: security risk assessment for meaningful

use

>>

>>

>> Do you have to pay the REC at all? Forgive my ignorance. Thank you everyone

for your help. I love how this group does not let us feel like we are alone out

here!

>> Margaret

>>

>> Re: security risk assessment for meaningful

use

>>

>>

>>

>> Rec is the way to go

>>

>> Adolfo E. Teran, MD

>>

>> On Feb 15, 2012, at 9:03 AM, Margaret Coughlan <

drmarge@...<mailto:drmarge%40pol.net><mailto:drmarge%40pol.net> > wrote:

>>

>>

>>

>> I am in the training/transitioning phase to go live with Athena Health next

month. I have not done anything about meaningful use before now. They have told

me I need to do a security risk assessment thing as part of that. They have a

company that you can use/pay to help do that. I know many of you have already

attested. What did you do about this security thing? Did you do it on your own?

Did you hire someone to help? What exactly is involved? How difficult is it?

>> THanks for any feedback,

>> Margaret Coughlan

>>

>> =

>>

>>

>>

>>

>>

>>

>>

>>

>>

>>

>> ------------------------------------

>>

>>