Certificate of Encryption Awareness Proficiency in Healthcare (CEAP)

This CEAP Certificate course offers training on basic security and encryption strategies for healthcare environments.Federal regulations specifically exempt encrypted Protected Health Information (PHI) from breach reporting requirements. A lost laptop containing unencrypted PHI is a major breach and a financial and reputational disaster. The same laptop with encrypted data is not a reportable breach. But HIPAA calls for encryption of all ePHI, whether it is stored or transmitted. This session will focus on pragmatic strategies for providers to encrypt PHI.
Upon completion of this continuing medical education activity, participants should be able to:

1. Define federal healthcare regulations on encryption
2. Demonstrate working knowledge of the difference between data at rest and data in transmission
3. Discuss strategies for full-disk encryption
4. Enumerate advantages of hardware-based encryption
5. Identify scenarios that require Business Associate Agreements with vendors
6. Review the advantages of using cloud-based storage
7. Describe the advantages of using a patient portal and EHR messaging
8. Determine whether encrypted email is appropriate for their needs
9. Identify compliant solutions for chat and text