Skip to main content

Posts

NIST guidance on managing IoT(Internet of Things) cybersecurity and privacy

Compliance Key  -  HIPAA  Webinar in United States Overview To date the only specific requirement relating to the National Institute of Standards and Technology ("NIST") Standards in the Security Rule does not require compliance with any NIST Standard but rather exempts covered entities from having to report breaches if they meet either of two NIST standards-the encryption standard or the disposal standard. The Security Breach Notification Rule only requires reporting of breaches of "unsecured" PHI. 45 C.F.R.  164.400-414. If data is encrypted or disposed of consistent with those two standards, it is secured, and, hence, unreportable With the increasing number of cybersecurity breaches since HIPAA became law, DHHS recognized that more attention needed to be paid to improving cybersecurity and focused on the NIST Framework for Improving Critical Infrastructure Cybersecurity (the Cybersecurity Framework) and developed a crosswalk between it and the HIPAA Se...

Conducting a Life Sciences documentation and Training Gap Analysis

Compliance Key - Life science webinars   Overview The relationship between government regulations, actual job tasks performed by workers, compliance requirements, equipment maintenance and operational requirements, and process descriptions all are foundational to both the training that must be conducted in a regulated facility and the actual compliance documents that must be created to meet all regulatory requirements. How a training and documentation professional undertakes an analysis to determine these requirements directly influences the quality of the training developed and fielded and the completeness and relevance of the compliance documentation prepared. Many regulated industries have a multitude of documents to meet their regulatory needs, training materials, SOPs, Work Instructions, Job Aids, and Performance Tests etc. all independently prepared complicating document control and impacting individual document effectiveness. One of the keys to both e...

ACH Government Payment Processing - Handling DNE's and Reclamations

Compliance Key - Bank webinars in United States   Overview Processing ACH payments from the Federal Government can be challenging! This session will outline details on when account holders are deceased and what your responsibilities are to the Federal Government if they are receiving benefit payments. The NACHA Operating Rules still apply when processing these payments but the Green Book outlines exceptions when handling DNEs (Death Notification Entries) and Federal Government Reclamations. A side by side comparison of Commercial vs. Government Reclamations will be included to know what the difference is and how to handle each one. Why should you attend this webinar? In this 90-minute session you will hear all the details about how processing Federal Government payments differ from the NACHA Operating Rules. You will learn what the Green Book is and how this valuable on-line tool will help you with processing DNE's and Government Reclamations. Commercia...

Are Your I-9's in Order? - ICE Promises a 5 Fold Increase in Enforcement Inspections

Compliance Key INC  - HR Webinar in United States Overview In the 2017 Fiscal Year ending 9/30/2017, Immigration and Customs Enforcement (ICE) conducted 1,360 I-9 audits during the entire year, In the 2018 Fiscal Year starting 10/1/2017, ICE has already conduced 2,282 through May 4, 2018. In addition, ICE has raised the fines for incorrect I-9 forms to $224 to $2,236 per incorrect I-9 form. The amount of the fine depends upon the percentage of incorrect I-9 forms. Recent I-9 Penalties issues by ICE: Buffalo Transportation Company - $109,000 for not completing Section 2 Asplundh - $95 Million Panda Express - $600,000 Florida Pizza Delivery Company, Pizzerias, LLC - $140,000 Don't let your company become a statistic. This webinar will concentrate on: The importance of understanding the requirements for completing I-9 Forms. The importance of the timeliness of completing I-9 forms. Determining best practices for Electronic Record keeping of I-9 Forms. Develo...

HR Auditing: Critical Issues in 2019

Compliance Key INC  - HR Webinar in United States Overview Numerous external forces and factors have an impact on the purpose, scope, and demand for HR audits. First, in the global economy, human capital has become for many organizations the single most important determinant of competitiveness, productivity, sustainability, and profitability. Increasingly, the organization's human capital is the source of innovation and a driver of business success. Second, a confluence of economic, political, and social factors, including stockholder, plaintiffs, and third party initiatives, have resulted in increased statutory and regulatory requirements, the call for greater transparency, and increased internal and external audit activity. Third, governmental agencies have become more active - some would argue more aggressive - and have committed increasing resources to conducting assessments of employment policies and practices. Importantly, the EEOC, the OFCCP, U.S. ...

Good Documentation Practice and Record Keeping Regulations (FDA & EMA)

Compliance Key INC  - FDA Compliance Training United States Overview Good documentation Practices (GDP) is an essential factor that needs to be closely followed by the personnel in any regulated environment as a process for a successful project completion including observations of unanticipated responses that are required to be accurately recorded and verified. This 60-min Webinar covers the essentials of GDP, its definition, purpose, and importance. Then expands on general rules and principles of GDP (US & EU), General tips for Laboratory Notebook documentation and finally discussing GDP enforcement by regulatory bodies in different countries with some examples of FDA citations. Why should you attend this webinar? If you are involved in any product manufacturing, knowing GDP regulations is a must for you. It prevents a lot of errors and minimizes the chance of being spotted by the regulatory bodies in their audits. Areas Covered in the Session: Follo...

How to Prepare for an OCR HIPAA Breach Investigation

Compliance Key INC  -  Hipaa Webinar Overview There has been a trend towards higher settlements payments. There were 7 recent settlements over $1 million including $5.5 million, $3.9 million, and $2.75 million and 12 overall resolutions settlements. In 2017, there was continued HIPAA enforcement with a number of new settlements announced and the trend continues in 2018. Roger Severino, the Director of OCR, has said "enforcement is a key aspect of HIPAA" and organizations must embrace a "new posture of preventive security." If your organization experiences a HIPAA breach, OCR will be conducting an investigation and requesting compliance policies and procedures, risk assessment reports and training records. Find out how to prepare. The presenter for this webinar has worked with organizations under investigation by OCR. Attendees will leave the webinar clearly understanding of all the requirements that must be in place for HIPAA and how to demonst...