Covenant Health Ransomware Breach Analysis
Covenant Health Ransomware Breach Analysis: Likely HIPAA Security Rule, Cybersecurity, and AI Observability Lessons from the May 2025 Qilin Attack By Michael F. Arrigo Note: This analysis is based on…
Covenant Health Ransomware Breach Analysis: Likely HIPAA Security Rule, Cybersecurity, and AI Observability Lessons from the May 2025 Qilin Attack By Michael F. Arrigo Note: This analysis is based on…
Is Your Business Vulnerable to Wiper Malware? Lessons from the Stryker Attack and Prevention Strategies for 2026 Recent high-profile cyber attacks, such as the March 2026 wiper malware assault on…
Practice Fusion Perverted the Intent of Key Patient Safety Measures in Clinical Decision Support in its Electronic Health Record Software According to publicly available sources on the U.S. Department of…
HIPAA Expert Witness Experience In my HIPAA Expert Witness experience serving as an expert on the HIPAA Privacy Rule and the HIPAA Security Rule, advising clients in HIPAA breach litigation…
Does your organization have Standard Operating Procedures (SOPs) that use ICD-9 CM diagnosis or ICD-9 procedure code information? If so, those procedures and systems need to be evaluated as part of the ICD-10 Impact Assessment.
These are important foundations that enable ubiquitous digital health data in a standard interchange, enabling in-depth analysis and increasingly, Cloud and Software as a Service methods to deploy, store and use the information to improve healthcare. These in turn are important foundations to enable Accountable Care. ICD-10 is the new data standard that will express the condition of the patient and how providers get reimbursed.
EMR Certification (also called EHR certification) of electronic medical records or electronic health records is required for any vendor to be listed in the ONC Certified HIT Product List. We provide assistance on the certification process.
Almost everyone who studies the problem agrees that longitudinal health records are beneficial, but as I look into how HHS is hoping to do this, there are gaps that aren't being addressed.
The HITECH Act provides incentives for Medicare and Medicaid providers to achieve Meaningful Use of Electronic Medical Records. Meaningful Use Assessment should include these phases and components:
One of the key questions will be how the EMR provides a foundation with the Health Information Exchanges (HIEs) for comparative effectiveness data over the life span of a patient (sometimes called the continuum of care) and whether CDA standards currently proposed will accomplish that. Informatics people call this "longitudinal clinical data."
Sensationalism creates a sense of temporary urgency to know more. Mubarek steps down, Lady Gaga is #1, however, in health care reform more than 50% of all health care companies in the U.S. are not prepared for a new reimbursement system called ICD-10. This is a slow steady march to what could be a sensational event in the future. If a large percentage of health insurance firms and hospitals cannot submit or process claims in the new medical coding system, then it could lead to the next Federal bailout - but this time in health care not financial services.
Centers for Medicare and Medicaid Services (CMS) has announced that registration for its Medicare and Medicaid Electronic Health Record (EHR) incentive programs will begin January 3, 2011