A Pro’s Guide to Conducting Your Annual Privacy and Security Risk Assessment

Compliance Conversations by Healthicity

Recently, I sat down with Brian Burton, our new Chief Compliance and Privacy Officer, for an all-new episode of the Compliance Conversations podcast. Given the time of year, and his area of expertise, we focused our discussion on a topic on many people’s minds: Privacy and Security Risk Assessments. I know these assessments can be daunting to approach or, as Brian put it, “I think a lot of organizations struggle with what does that mean, and how can I accomplish this activity with the minimum amount of effort, but still know that it’s accurate, and that your organization is protected from cyber security threats.” Having worked in the healthcare industry for more than 15 years, Brian become an expert in all things project management and technology. He's devoted most of his career to developing, implementing, and providing oversight for Compliance and Privacy program initiatives, working with more than one hundred healthcare facilities. Considering Brian’s vast experience, we discussed the symbiosis between project management and risk assessments, and how organizations should “initiate a project, then execute, monitor, control, and close,” in order to successfully identify and mitigate their risks. To hear more of Brian’s advice and best practices, listen to our latest episode of Compliance Conversations, “A Pro’s Guide to Conducting Your Annual Privacy and Security Risk Assessment,” where we cover topics including: • How to Protect Your Organization from Cyber Security Threats • What Tools You Should Use to Conduct Your Annual Security Risk Assessment • Which Cyber Security Framework Your Organization Should Deploy