Finding a risk in your Security Risk Analysis is only half the job. The other half is fixing it, proving you fixed it, and closing the loop.

This episode walks through the full lifecycle of a corrective action plan, from identifying the gap to building a remediation plan, assigning ownership, gathering proof, and formally closing it out. We also cover the common mistakes that stall progress or leave organizations exposed during audits, and three steps you can take right now to get your open findings moving in the right direction.

Learn more about Medcurity here: https://medcurity.com

#Healthcare #Cybersecurity #Compliance #HIPAA #SecurityRiskAnalysis #CorrectiveActionPlan #AuditReady #HIPAACompliance #HealthcareIT

Small changes in legislative language can create major consequences for healthcare organizations.

In this webinar recording, healthcare attorney and former Idaho legislator Luke Malek joins Kyle Rooks of the Idaho Community Health Center Association to discuss how new bills can shift compliance expectations, alter legal obligations, and create unintended operational challenges for providers.

The conversation looks at how wording changes can expand or narrow who is affected, how new bills interact with statutes already in place, and why the actual bill text matters more than outside interpretation when organizations are trying to understand what changed.

Connect with Kyle Rooks: https://www.linkedin.com/in/kyle-rooks-6aa71269/

Connect with Luke Malek: https://www.linkedin.com/in/lukemalek/

Connect with Molly Miller: https://www.linkedin.com/in/molly-miller-spokane/

Learn more about Malek + Malek: https://www.malekattorneys.com

Learn more about the Idaho Community Health Center Association: https://www.idahopca.org/home

Learn more about Medcurity: https://medcurity.com

#Healthcare #Compliance #HIPAA #HealthcarePolicy #HealthcareLaw #CommunityHealth #FQHC #HealthcareIT #SecurityRiskAnalysis #LegislativeUpdates

For years, the SRA measure under MIPS Promoting Interoperability was a single yes/no attestation. Did you conduct or review a Security Risk Analysis? Check. Done.

Starting with the 2026 performance year, CMS added a second required attestation: did you conduct security risk management activities in accordance with the HIPAA Security Rule? A "no" on either attestation zeros out your entire PI score, which can significantly impact your MIPS performance and contribute to negative Medicare payment adjustments (up to 9% under MIPS overall).

This episode breaks down what changed, why CMS is pushing beyond the checkbox, and what it means for practices that need to show they're not just completing an SRA but acting on the findings.

Learn more about Medcurity here: https://medcurity.com

#Healthcare #HIPAA #Cybersecurity #MIPS #SecurityRiskAnalysis #HealthcareIT #Compliance #HIPAACompliance #PromotingInteroperability #MedicareReimbursement