NIST SP 800-66  NIST Guide to Implementing HIPAA became final March 2005.  The attached excel file is a crosswalk by Security Standard and Implementation Specification to NIST recommended publications.  I added the General Rules of the HIPAA Security Standard (which is discussed in SP 800-66, but not included in its publication matrix.  I have added additional publications that in my opinion may be beneficial in addressing the standard or spec.  The ones that I added are indicated with an asterisk (*). 

 

I find that reading the actual HIPAA language and the preamble is helpful, so for those who prefer to work off the HIPAA Security Rule I have provided a link for each section to the Bricker and Eckler web site.

 

Bricker and Eckler provids some great HIPAA resources through a web site hosted by the Ohio Hospital Assn. The particular link below is for their HIPAA index "Regulations by Topic". Each regulation section you click (e.g 512 b looking for information about Death Notice) is followed immediately by the preamble discussions of that section. This saves you from having to flip back and forth from reg to preamble.

http://www.bricker.com/hipaa/hipaaindex.asp

There have been several new DRAFT NIST publications since final NIST SP 800-66 was published.   Visit http://csrc.nist.gov/publications/nistpubs/ for all the latest NIST guidance.

 

If you do not receive the attachment, you may access/download NIST SP 800-66 in excel from the ShareHIPAA group's file section.  It appears in the files index like this:

 

NIST SP 800 66.xls
Msg# 187 NIST Guide to HIPAA Implementation Rev

04/27/2005

 

To access the files section of the ShareHIPAA group, go to the group's home page at:

http://health.groups.yahoo.com/group/ShareHIPAA/

Sign in with your Yahoo! ID and password and select "Files" from the left column.  Files are listed in alphabetical order.

 

Any comments, especially if you find errors in the links, are needed and welcomed.  Please contact me.

 

I have integrated NIST guidance and the recent HIPAA regulations and NPRM in a HIPAA Awareness and Training Curriculum called Simply HIPAA iLearn.   Visit www.simplyhipaa.com to learn more about this program.

 

Regards,

Barbara McGowin
Executive Recruiting
HIT Recruiting
(843) 824-8537
Barbara@...

Connecting Healthcare Organizations with People,
Products and Services to Achieve HIPAA Compliance.