Continuing the thread from the last blog where I discussed the first HIPAA network consideration, 'HIPAA Audits will continue', in this blog I'll discuss the second network consideration on the list below.  Remember, The HIPAA Omnibus Final Rule, released January 2013, introduced some significant changes and updates.  The 2012 HIPAA audits concluded with some initial findings released from The Department of Health and Human Services (HHS) Office of Civil Rights (OCR).  These two events may impact how you govern your internal organization and network for patient privacy and protection of PHI.  The deadline for compliance with the updates to the HIPAA Omnibus Final Rule is September 23, 2013.

In summary, below are the nine HIPAA network considerations:

1. HIPAA Audits will continue
2. The HIPAA Audit Protocol and NIST 800-66 are your best preparation
3. Knowledge is a powerful weapon