Don’t fall into a trap of using the pandemic as a justification for continuing to keep substandard security and compliance in place. No matter the pandemic status for your group, you proceed to might be targeted for cyberattacks and still work to comply with forthcoming federal laws. A HIPAA security threat evaluation is one way to start, but ONC said it may not be enough. Other frameworks, such because the NIST Cybersecurity Framework, must be used to make sure a comprehensive framework for identifying safety risks and appropriateness of security practices that adhere to “best practices” as is required by the data blocking rule safety exception.