I will be hipaa security officer for your healthcare business

Yes. Under 45 CFR § 164.308(a)(2), a covered entity or business associate must identify the Security Official responsible for developing and implementing the policies and procedures required by the HIPAA Security Rule.

Yes, subject to an agreed scope, a written service agreement, and your organization formally documenting the assignment. The service provides oversight and coordination of your HIPAA security policies, procedures, risk activities, and security priorities.

It includes agreed security responsibility and governance. It may also include the policy oversight, risk reviews, action tracking, documentation guidance, and leadership reporting.

It adds a documented risk assessment covering ePHI systems, workflows, vendors, threats, vulnerabilities, safeguards, likelihood, impact, and priorities.

It adds ongoing risk management, including treatment planning, risk ownership, action tracking, progress reviews, and residual-risk reporting.

Your entity type, size, locations, systems. And if you have it, ideally: ePHI flows, vendors, policies, previous assessments, relevant contacts, and known security concerns.

No. I provide security governance and risk support. Compliance also depends on your organization’s decisions, implementation, operations, documentation, and workforce. In addition, HIPAA is the law, there aren't any HIPAA official certifications.

Yes, of course, you are welcome to book a free of charge 15minutes consultation on my LinedIn page, by clicking the "book an appointment" action button. https://www.linkedin.com/in/denisgalkin/ Alternatively, you are welcome to book consultation on https://adSecurus.com