1. State of Iowa Enterprise HIPAA Compliance
ICN Presentation
HIPAA Gap
Analysis Training
Presented by the
State of Iowa Enterprise HIPAA Compliance
Project Office
and

2. Activities that address the issues to cover this
The Use of a Gap Analysis
HIPAA
Requirements
(Privacy,
Transactions &
Code Sets)
Current
Operational
Conditions
GAP
Activities that address
the issues to cover this
gap define the project
plan and activities.

3. Effective Project Management
Getting Started
Defining Expectations
Defining the Work
Estimating the Project
Finalizing the Plan
Building the Project Team
Tracking Project Progress
Controlling the Project
Reporting and Communications
Closing Out the Project

4. Effective Project Management
(continued)
1. Getting Started
Making sure you are doing the right project.
Ensuring you have a mandate.
Verifying priority and ensuring consensus.
2. Defining Expectations
Identifying project stakeholders.
Defining project requirements.
Gaining agreement on project outcomes.
3. Defining the Work
Establishing project scope.
Defining project deliverables.
Identifying project activities.
Establishing order and logic.

5. Effective Project Management
(continued)
4. Estimating the Project
A process for estimation.
Estimating effort.
Scheduling and resource leveling.
Cost estimation.
Estimating for change and contingency.
5. Finalizing the Plan
Developing the Project Plan.
Ensuring approval.
Adopting Project Management schedules.
6. Building the Project Team
Determining project staffing.
Building effective project teams.
Managing for continued team performance.

6. Effective Project Management
(continued)
7. Tracking Project Progress
Tracking effort, schedule, and cost.
Using performance measures.
8. Controlling the Project
Managing project issues.
Managing and controlling project scope.
Managing for project risk.
9. Reporting and Communications
Maintaining organizational awareness.
Communicating status and progress.
10. Closing Out the Project
Completing the project.
Evaluating project success.
Conducting post implementation reviews and learning for the future.

7. HIPAA Covered Entities
HIPAA Deadlines for
HIPAA Covered Entities
Administrative Simplification – Standardized Transactions and Code Sets for Electronically Filed Medical Claims
If you have not filed for a deadline extension with HHS, you were required to start using the standardized transactions and code sets effective October 15, 2002.
If you have filed for an extension of the deadline with HHS, you must begin testing with the new standardized transactions and code sets by April 14, 2003 and must begin using them for all electronic transactions no later than October 15, 2003.
Privacy Requirements
April 14, 2003
Security Requirements
Not finalized – no deadline yet

8. HIPAA Deadlines for Business Associates
HIPAA Covered Entities must have business associate agreements in place
April 14, 2004

9. http:// www.iowasnip.org
Iowa SNIP (Strategic National
Implementation Process) Affiliate Website

10. National SNIP (Strategic National Implementation Process) Website

11. Enterprise HIPAA Compliance Project Office Website
State of Iowa
Enterprise HIPAA Compliance
Project Office Website

12. http://www.cms.hhs.gov/hipaa/ Department of Health and Human Services
Health Insurance Portability and
Accountability Act of 1996 (HIPAA) Website

13. http://www.hhs.gov/ocr/hipaa/ Department of Health and Human Services
Office for Civil Rights – HIPAA Website

14. Enterprise HIPAA Compliance Project Office Contact
State of Iowa
Enterprise HIPAA Compliance
Project Office Contact
Tom R. Shepherd
State of Iowa
Enterprise HIPAA Compliance Project Administrator
(515)