Key Takeaways

• The Office for Civil Rights announced penalties pursuant to its Risk Analysis Initiative that emphasize the importance of the security risk analysis’ form and substance.
• OCR made clear it will not accept off-the-shelf or templated risk analyses from entities or their vendors that do not fully address the nuances of the organization and

…