Neurology & Pain Management Coding Alert
Stay Vigilant — and in Line With HIPAA Rule
Question: We’ve been experiencing an increase in phishing and are aware of reports of ransomware events. Are there any resources available to keep us apprised of emerging threats so we can be in a more defensive position and comply with the HIPAA Security Rule? Virginia Subscriber Answer: Yes, there are a couple of handy online resources that offer the most up-to-the-minute advice on threats. One helpful site to look at is the National Vulnerability Database (NVD), which is maintained by the National Institute of Standards and Technology (NIST). “The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP),” NIST explains. The NVD resources offer tips on managing and measuring vulnerabilities while alerting the public to known software flaws, misconfigurations, and cyber impacts. Heads up: As part of their policies and procedures, covered entities (CEs) and their business associates (BAs) must address known and possible vulnerabilities in their risk analysis, according to the HHS Office for Civil Rights (OCR) in the 2022 Cybersecurity Newsletter for the first quarter. OCR explains that vulnerability “can exist in many parts of a regulated entity’s information technology infrastructure (e.g., server, desktop, and mobile device operating systems; application, database, and web software; router, firewall, and other device firmware).” OCR advises, “Often, known vulnerabilities can be mitigated by applying vendor patches or upgrading to a newer version. If a patch or upgrade is unavailable, vendors often suggest actions to take to mitigate a newly discovered vulnerability.” CISA: The Cybersecurity and Infrastructure Security Agency (CISA) also offers daily updates on a variety of issues — and includes industry-specific guidance. Plus, you can subscribe to CISA’s numerous alerts and bulletins on a plethora of topics. Other tools on the site include a dedicated Stop Ransomware page, cyber hygiene services, and regionally based cyber tools and resources. Resources: Visit the NVD resources at https://nvd.nist.gov and peruse the CISA site and guidance at www.cisa.gov.
Related Articles
Neurology & Pain Management Coding Alert
- E/M 2023:
Changes Coming for Hospital Codes
Here’s what you’ll use instead of 99217 next year. The AMA has made its changes [...] - News You Can Use:
Conversion Factor Cut in 2023 Proposed Rule
Don’t expect another 3% boost for next year. With COVID still causing trouble and practice [...] - ICD-10 2023:
New Code Sets Expand Cranial Injury Diagnoses
Blast-wave injuries get big Dx bump. Last month, we examined a bevy of new diagnosis [...] - You Be the Coder:
Mysterious Headache Dx
Question: During a level-four office evaluation and management (E/M) service for a new patient, the provider [...] - Reader Questions:
Unknown Loss of Consciousness Status? Look to These New Codes
Question: I heard that ICD-10 2023 will include several codes new for specified/unspecified cranial injury. Will [...] - Reader Questions:
Use Add-on for Multiple Intercostal Shots
Question: Encounter notes indicate that the provider performed anesthetic injections to three intercostal levels. How should [...] - Reader Questions:
Get More Info Before Spinal Puncture Code Choice
Question: Encounter notes indicate that the provider performed a spinal puncture. How should I report this [...] - Reader Questions:
Stay Vigilant — and in Line With HIPAA Rule
Question: We’ve been experiencing an increase in phishing and are aware of reports of ransomware [...]
