HIPAA
Skill packages tagged with “HIPAA”
Cybersecurity Incident Response Plan (Sector & State-Specific)
Draft a cybersecurity Incident Response Plan aligned with NIST SP 800-61r3, tailored to industry sector (HIPAA, GLBA, PCI DSS, FERPA, NERC CIP) and state breach notification laws. Includes detection playbooks, escalation procedures, and state-by-state notification timeline matrix.
HIPAA Security Risk Assessment (SRA)
Draft and validate the Security Risk Assessment required by the HIPAA Security Rule (45 CFR §164.308(a)(1)). Defines scope and ePHI boundaries, inventories assets and Business Associate relationships, maps threats and vulnerabilities, assesses Required and Addressable safeguards, and produces the SRA report and risk register aligned with HHS/OCR audit protocol.
HIPAA Security Rule Modernization Roadmap
Build a 180-day remediation roadmap restricted to the deltas between the current HIPAA Security Rule (45 CFR Part 164 Subpart C) and a proposed amendment (e.g., the 2024 NPRM RIN 0945-AA22). Parses both XML sources by section, generates a delta matrix with citations, and produces a narrative roadmap and phased Gantt aligned to the 180-day window.
Redaction tool (healthcare case studies)
Pre-publication PHI-redaction reviewer-aid for Rakenne-generated healthcare artifacts (letters of medical necessity, appeal letters, peer-to-peer briefs, case.json, packet-index, cover-sheet) being prepared as anonymized case studies for external sharing. Surfaces the 18 HIPAA identifiers where heuristics are reliable, lets the LLM triage candidate names, applies reviewed redactions with relative DAY+n date anchoring, and blocks export when any reliably-detectable identifier remains. Not a HIPAA Safe Harbor or Expert Determination de-identification certification — compliance review is still required before publication.