1. The Tenth National HIPAA Summit April 7, 2005
Roundtable Discussion of HIPAA Security Rule Implementation and Compliance Strategies
The Tenth National HIPAA Summit
April 7, 2005

2. The Next Martha?
Healthcare IT News: March 2005

3. Agenda Session Objectives Introductions Brief Presentations by
Roundtable Members
Questions
/Answers
/Discussion 2 2

4. Session Objectives

5. Session Objectives…
During this session we will explore and discuss the following:
Where should the healthcare industry be at this point in time in relation to the HIPAA Security Rule and healthcare security, in general?
Where is it really?
What were/are some of the barriers to compliance?
How do think the industry managed the “addressable implementation specifications” of the Rule?
How do you think enforcement will be handled?

6. Session Objectives
During this session we will explore and discuss the following:
What technology exists on the horizon that will better enable healthcare security?
What’s in the future for HIPAA Security regulatory updates/refinements?
What impact will EHR, HIT, NHIN, etc. and other healthcare initiatives have on healthcare security?
What impact/serendipity effect will recent large-scale incidents involving sensitive data and the increasing paranoia about identity theft by both the public and the Congress have on healthcare security?
Etc., etc.

7. Introductions

8. Roundtable Members John C. Parmigiani (Moderator)
Sr. VP for Consulting Services, QuickCompliance, Inc. and President, John C. Parmigiani & Associates, LLC
Ronald S. Ross, Ph.D.
Computer Science Division, Information Technology Laboratory, National Institute of Standards and Technology
Ali Pabrai, CISSP, CHSS
Chief Executive, HIPAA Academy
Gary G. Christoph, Ph.D., CISM, CHS
Senior VP, Government and Healthcare, Seclarity, Inc.
Kevin C. Day
CTO, Relational Security Corporation

9. And now for our first roundtable member’s presentation: Ron Ross