Resources

Websites:

• Office of the National Coordinator for Health Information Technology (ONC): https://www.healthit.gov/
• U.S. Department of Health and Human Services (HHS): https://www.hhs.gov/hipaa
• Healthcare Information and Management Systems Society (HIMSS): https://www.himss.org/
• United States Computer Emergency Readiness Team https://www.us-cert.gov/

Publications & Reports:

• https://www.us-cert.gov/sites/default/files/publications/TIP10-105-01.pdf
• https://www.us-cert.gov/sites/default/files/publications/TIP10-105-01.pdf
• https://www.himss.org/himss-healthcare-cybersecurity-environmental-scan-reports?ItemNumber=47762
• https://www.himss.org/sites/himssorg/files/u132196/2018_HIMSS_Cybersecurity_Survey_Final_Report.pdf
• https://www.himss.org/library/phishing-dont-be-phooled

HIPAA Security Rule Crosswalk to NIST Cybersecurity Framework:

• https://www.hhs.gov/hipaa/for-professionals/security/nist-security-hipaa-crosswalk/index.html

Security Risk Assessments (SRA):

• Office of the National Coordinator for Health Information Technology (ONC) https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment

Cyber Security Toolkit:

• Cyber Security Toolkit for Rural Hospitals and Clinics https://www.ruralcenter.org/resource-library/cybersecurity-toolkit-for-rural-hospitals-and-clinics

Staff Training:

• Office of the National Coordinator for Health Information Technology (ONC) https://www.healthit.gov/topic/privacy-security/privacy-security-training-games