6 ms·
Compliance is needed just so that you can get it checked off on a list. It does not necessarily mean that you are safer. It could mean better safety but does no
by newman314 13y ago
Compliance is needed just so that you can get it checked off on a list. It does not necessarily mean that you are safer. It could mean better safety but does not guarantee it.
What it does provide is that in the wake of an incident, the ability to say: "Hey! But I was PCI, FIPS, HIPAA, FedRamp etc. compliant!"
- dfc 13y agoIt Provides: significant mitigation of civil liability I realize it does not mesh well with the narrative you are trying to advance but take a look at the difference in HIPAA fines for an individual/organization that demonstrated reasonable diligence and another that willfully neglected HIPAA: Per violation Annual Maximum Reasonable Diligence $100 $25,000 Willful Neglect $50,000 $1,500,000 http://www.ama-assn.org//ama/pub/physician-resources/solutions-managing-your-practice/coding-billing-insurance/hipaahealth-insurance-portability-accountability-act/hipaa-violations-enforcement.page http://www.ama-assn.org//ama/pub/physician-resources/solutio...
- sjwright 13y agoIt means that senior executives can wash their hands of the matter. They did their job correctly, they'll argue.