Building a HIPAA-Compliant Cybersecurity Program : Using NIST 800-30 and CSF to Secure Protected Health Information

Goes beyond just HIPAA compliance--focuses on a specific requirement within the Administrative Safeguards of the HIPAA Security, showing readers how to build a cybersecurity program to achieve compliance while attempting to protect health information

Shows readers how to examine the current risk analysis and, if necessary, take immediate actions to improve the process

Creates a life cycle of continuous improvement and uses more technical and focused assessments to feed the risk assessment and analysis process