How does the emergency mode operation plan implementation specification differ from the disaster-recovery plan?
HIPAA Weekly Advisor, June 28, 2004
Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!
An emergency mode operation plan is essentially the organization's business continuity plan. A business continuity plan is often used interchangeably or confused with the disaster-recovery plan, but there is a difference.
The emergency mode operation plan contains the procedures, methods, and processes to keep PHI protected and where it's needed during a crisis. This satisfies the PHI "availability" goal of the security rule.
The disaster-recovery plan details concerns restoring your information systems and healthcare operations to the state they were in before the disaster. Key components of a disaster-recovery plan include the following:
- List of team members along with their contact information, roles, and responsibilities
- Healthcare functions and information systems
- Explanation of when and how the plan will be invoked
- Specific recovery procedures
- Internal and external communications plan
- Emergency facilities for staff and information systems
Editor's note: This question was answered by Kevin Beaver, founder and principal consultant of Principle Logic, LLC, and coauthor of the book The Practical Guide to HIPAA Privacy and Security Compliance by Auerbach Publications and author of the book Hacking For Dummies by John Wiley and Sons.
Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!
Related Products
Most Popular
- Articles
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Catch up on what's new with injections and infusions
- Topic: CMS, OESS post new security compliance review information, checklist
- Capturing all necessary codes for IUD insertion and removal can be challenging
- HIPAA Q&A: Level of encryption needed for email
- What does case-mix index mean to you?
- QA:Coding multiple initial infusions
- Identify potential Medicaid RAC target areas
- OB services: Coding inside and outside of the package
- E-mailed
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- HIPAA Q&A: Level of encryption needed for email
- Q&A: Follow CMS' coding guidelines when using modifier -25
- CMS has reformulated payments for some bilateral procedures
- Catch up on what's new with injections and infusions
- New conflicts of interest create new challenges
- Q/A. One injection code or two?
- What does case-mix index mean to you?
- ED-to-inpatient transfers are flawed with safety gaps
- Searched