Managed Breach Response
Breach Pre-Planning
Healthcare Organizations and Business Associates can enroll in the Tunitas Group Managed Breach Response program in advance so that rapid and decisive actions can be taken if personal or protected health information is breached.
Advanced enrollment gives you access to our:
Breach Detection Assessment -- HITECH places a strong emphasis on the organization's ability to reasonably detect when a breach has occurred. The time allowances for conducting risk assessments and reporting if necessary are aggressively short. Unless your organization has implemented appropriate breach detection controls, you have not optimized your response management options.
Risk Assessment Framework-- The risk assessment option currently exempts from breach notification by a healthcare organization any breach that does not pose a significant risk to the individual. In order to meet the reporting timeframes, most organizations will need to have pre-assessed individualized harm prior to a breach event. Tunitas Group has a tested model for this type of risk assessment which has been customized for typical healthcare risk situations.
Customized Incident Response Plan -- Tunitas Group works with your breach response team to develop a rapid response plan for breach events. This plan includes investigation checklists, forensic analysis requirements, templated notification letters regulatory reports.
Breach Recovery
Immediately upon recognizing a potential breach event, an organization must respond by confirming a breach has occured, containing the source of the breach, correcting the cause of the breach and mitigating the effect. Tunitas Group has a number of services that can help:
Data Forensics - An organization should ensure they truly have had a breach and that personal or protected health information has been compromised. Data forensics can help by determining how the breach occurred, who may have been involved, what data was compromised, and whether controls were effective. Data Forensics is an important tool to preserve the state of the impacted computer systems for evidentiary purposes
Crisis Communications and Media Management - Some breaches will quickly draw the attention of media and the organization's stakeholders. Tunitas Group has experienced communications managers to help you develop media handling skills, draft press releases, customize media notifications.
| Related Material | Managed Breach Response Brochure (pdf) |
Contact Tunitas Group for more information.