---
title: "Discussion on \"A Hospital HIPAA Risk Analysis Is Not an Evidence Scan: Why 45 CFR 164.310 Requires Someone Onsite\" | Hashnode"
description: "Discussion on \"A Hospital HIPAA Risk Analysis Is Not an Evidence Scan: Why 45 CFR 164.310 Requires Someone Onsite\". A HIPAA Security Risk Analysis and automated compliance-evidence monitoring are different deliverables, and a hospital should know which one it is buying. The risk analysis is required of every covere"
url: "https://hashnode.com/posts/a-hospital-hipaa-risk-analysis-is-not-an-evidence-scan-why-45-cfr-164-310-requires-someone-onsite/6a698e282768d7d01b016eb7"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [A Hospital HIPAA Risk Analysis Is Not an Evidence Scan: Why 45 CFR 164.310 Requires Someone Onsite](https://medcurity.hashnode.dev/a-hospital-hipaa-risk-analysis-is-not-an-evidence-scan-why-45-cfr-164-310-requires-someone-onsite?utm_source=hashnode&utm_medium=feed)

A HIPAA Security Risk Analysis and automated compliance-evidence monitoring are different deliverables, and a hospital should know which one it is buying. The risk analysis is required of every covere

Jul 29 · 4 min read · medcurity.hashnode.dev  
Read the article

-   [#hipaa](https://hashnode.com/tag/hipaa)
-   [#healthcare](https://hashnode.com/tag/healthcare)
-   [#security](https://hashnode.com/tag/security)
-   [#compliance](https://hashnode.com/tag/compliance)

## Written by

[Joe Gellatly](https://hashnode.com/@joegellatly)

@joegellatly

  
[View profile](https://hashnode.com/@joegellatly)

HIPAA compliance and healthcare cybersecurity. Co-founder at Medcurity.

Co-founder at Medcurity, helping healthcare organizations achieve and maintain HIPAA compliance. Writing about healthcare cybersecurity, security risk analysis, and compliance automation.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.