Insurers Lag on HIPAA Security Rule

Companies that linked security to privacy have a jump on their peers, which fall short on identifying the proper scope for risk analysis.

BARRIERS TO COMPLIANCE

While health insurers are generally better prepared for the April 21, 2005, HIPAA security rule's deadline than other healthcare industry participants, they still face compliance-readiness challenges:

• Incomplete or inappropriately scoped risk analysis efforts.
• Inconsistent and poorly executed risk management strategies.
• Limited or faulty information system activity review.
• Ineffective security incident reporting and response.

Source: URAC

Anthony O'Donnell has covered technology in the insurance industry since 2000, when he joined the editorial staff of Insurance & Technology. As an editor and reporter for I&T and the InformationWeek Financial Services of TechWeb he has written on all areas of information ... View Full Bio