One of the often overlooked core measures to meet Meaningful Use is Measure 15.
This states that
"Objective: Protect electronic health information created or maintained by the certified EHR technology through the implementation of appropriate technical capabilities.
Measure: Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1) and implement security updates as necessary and correct identified security deficiencies as part of its risk management process"
As a result of the revised HITECH Act of 2009 the penalties for non compliance have increased 10 fold. As an example, for violating HIPAA and exposing protected patient information the Maximum has gone from a $100 per violation to $50,000 with a maximum of $1.5 million. So we see that the Government is treating this matter very seriously. We are pleased to announce our partnership with eGestalt enabling us to offer a complete package with SecureGRC SB™ a Simplified HIPAA/HITECH Compliance for Medical Providers: Covered Entities (CE's) and Business Associates (BA's). We have heard horror stories of companies offering these services for $3-4,000 we are pleased to tell you we can help you become compliant with a simple web based tool for a fraction of that cost. Please call us to let us know if you are interested
![]() |
| eGestalt Logo |








