{"id":873,"date":"2020-04-28T10:19:20","date_gmt":"2020-04-28T15:19:20","guid":{"rendered":"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/?page_id=873"},"modified":"2025-02-20T13:42:21","modified_gmt":"2025-02-20T18:42:21","slug":"hybrid-entity-risk-assessments","status":"publish","type":"page","link":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/","title":{"rendered":"Hybrid Entity Risk Assessments"},"content":{"rendered":"    <section class=\"cc--component-container cc--hero-basic bg-image  hero-basic\">\n\n<div class=\"c--component c--hero-basic\">\n                <div class=\"background-image hero-bg-image \" style=\"background-image: url(https:\/\/it.rutgers.edu\/information-security\/wp-content\/uploads\/sites\/47\/2020\/07\/Untitled-design-2.png);\" aria-label=\"Image Description\">\n            <div class=\"f--image--hidden\">\n\t\t\t\t<div class=\"f--field f--image \">                <img decoding=\"async\" src=\"https:\/\/it.rutgers.edu\/information-security\/wp-content\/uploads\/sites\/47\/2020\/07\/Untitled-design-2.png\" alt=\"\">\n\t\t\t<\/div><!-- f--field f--image -->\n            <\/div>\n        <\/div>\n\t\n<div class=\"outer-wrapper\">\n    <div class=\"inner-wrapper\">\n        <div class=\"text-container\">\n            <div class=\"text-wrapper\">\n\t\t\t\t<div class=\"f--field f--page-title \"><h1>Hybrid Entity Risk Assessments<\/h1>\n\n<\/div><!-- f--field f--page-title -->\n\t\t\t\t<div class=\"f--field f--text \"><p><strong><a href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNjE5SERERlNaSFBMNkE2MjNWQlRKWlBJVSQlQCN0PWcu\" target=\"_blank\" rel=\"noopener\">Request a Hybrid Risk Assessment<\/a><\/strong><\/p>\n<\/div><!-- f--field f--text -->\n            <\/div>\n        <\/div>\n    <\/div>\n<\/div>\n\n\n<\/div><!-- c--component c--hero-basic -->\n\n    <\/section><!-- cc--component-container cc--section -->\n\n\n    <div class=\"cc--component-container cc--secondary-navigation  secondary-navigation\">\n\n<div class=\"c--component c--secondary-navigation\">\n        <div class=\"cc--secondary-header\">\n    <div class=\"c--secondary-header\">\n        <div class=\"secondary-nav-container\">\n            <div class=\"branding-secondarymenu-container\">\n                <div class=\"branding-secondarymenu-container-inner\">\n                    <div class=\"inner-wrapper\">\n                        <div class=\"cc--component-container cc--secondary-menu\">\n                            <div class=\"c--component c--secondary-menu\">\n                                <nav class=\"mc--menu mc--secondary-nav\">\n                                    <ul class=\"m--menu m--secondary-nav\">\n                                                                                            <div class=\"link-arrow-wrapper\">\n                                                        <button type=\"button\" class=\"has-submenu arrow-toggle\" aria-expanded=\"false\" aria-haspopup=\"true\" aria-label=\"Display Sub Menu for Apply\">\n                                                            <svg\n                                                                    xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n                                                                    x=\"0px\" y=\"0px\"\n                                                                    viewBox=\"0 0 20 11.7\" enable-background=\"new 0 0 20 11.7\"\n                                                                    xml:space=\"preserve\"\n                                                            >\n          <path d=\"M10,8.3L18.3,0L20,1.7l-10,10L0,1.7L1.7,0L10,8.3z\"><\/path>\n        <\/svg>\n                                                        <\/button>\n                                                    <\/div>\n                                                    <li class=\"menu-item\">\n                                                        <a\n                                                                href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/\"\n                                                                data-drupal-link-system-path=\"node\/84\"\n                                                        >\n                                                            Rutgers Risk Management Program                                                        <\/a>\n                                                        <div class=\"submenus-wrapper\">\n                                                            <div class=\"submenus-wrapper-inner\">\n                                                                <ul class=\"submenu\" aria-hidden=\"true\">\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/third-party-risk-assessments\/\">Third Party Vendor Risk Assessments<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/application-risk-assessments\/\">Application Risk Assessments<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/\">Hybrid Entity Risk Assessments<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNVdQSVBNRjZMVFhHSFo5SThXVzkyNVdWMCQlQCN0PWcu\">Third Party Vendor Recertification<\/a>\n                                                                        <\/li>\n                                                                                                                                            <li class=\"menu-item\">\n                                                                            <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/ad-hoc-risk-assessments\/\">Ad Hoc Security Risk Assessment<\/a>\n                                                                        <\/li>\n                                                                                                                                    <\/ul>\n                                                            <\/div>\n                                                        <\/div>\n                                                    <\/li>\n                                                                                        <\/ul><!-- m--menu -->\n                                <\/nav>\n                            <\/div><!-- c--component c--secondary-menu -->\n                        <\/div><!-- cc--component-container cc--secondary-menu -->\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n        <div class=\"secondary-mobile-nav\">\n\n            <div class=\"mobile-nav-topbar-container\">\n\n                <h2>\n                    Navigate to\n                    <span class=\"arrow-wrapper\"><svg\n                                xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"8\"\n                                viewBox=\"0 0 12 8\"\n                        ><g><g><path\n                                            d=\"M.936.5l4.95 4.95L10.835.5l1.06 1.06-4.95 4.95-1.06 1.061-1.061-1.06-4.95-4.95z\"\n                                    ><\/path><\/g><\/g><\/svg><\/span>\n                <\/h2>\n            <\/div>\n            <div class=\"secondary-mobile-nav-menu-container\">\n                <div class=\"cc--component-container cc--secondary-menu color-red\">\n                    <div class=\"c--component c--secondary-menu\">\n                        <nav class=\"mc--menu mc--secondary-nav\">\n                            <ul class=\"m--menu m--secondary-nav\">\n                                                                            <li class=\"menu-item\">\n                                                <div class=\"link-arrow-wrapper\">\n                                                    <a href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/\" target=\"_self\">\n                                                        Rutgers Risk Management Program                                                    <\/a>\n                                                    <button\n                                                            type=\"button\" class=\"has-submenu arrow-toggle\" aria-expanded=\"false\"\n                                                            aria-haspopup=\"true\" aria-label=\"Display Sub Menu for Rutgers Risk Management Program\"\n                                                    >\n                                                        <svg\n                                                                version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n                                                                x=\"0px\" y=\"0px\"\n                                                                viewBox=\"0 0 20 11.7\" enable-background=\"new 0 0 20 11.7\"\n                                                                xml:space=\"preserve\"\n                                                        >\n                      <path d=\"M10,8.3L18.3,0L20,1.7l-10,10L0,1.7L1.7,0L10,8.3z\"><\/path>\n                    <\/svg>\n                                                    <\/button>\n                                                <\/div> \n                                                <div class=\"submenus-wrapper\">\n                                                    <div class=\"submenus-wrapper-inner\">\n                                                        <ul class=\"submenu\" aria-hidden=\"true\">\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/third-party-risk-assessments\/\">Third Party Vendor Risk Assessments<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/application-risk-assessments\/\">Application Risk Assessments<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/\">Hybrid Entity Risk Assessments<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNVdQSVBNRjZMVFhHSFo5SThXVzkyNVdWMCQlQCN0PWcu\">Third Party Vendor Recertification<\/a>\n                                                                <\/li>\n                                                                                                                            <li class=\"menu-item\">\n                                                                    <a target=\"_self\" href=\"https:\/\/it.rutgers.edu\/it-risk-policy-and-compliance\/information-security-risk-management-program\/ad-hoc-risk-assessments\/\">Ad Hoc Security Risk Assessment<\/a>\n                                                                <\/li>\n                                                                                                                    <\/ul>\n                                                    <\/div>\n                                                <\/div>\n                                            <\/li>\n                                                                    <\/ul><!-- m--menu -->\n                        <\/nav>\n                    <\/div><!-- c--component c--secondary-menu -->\n                <\/div><!-- cc--component-container cc--secondary-menu -->\n            <\/div>\n        <\/div>\n    <\/div><!-- c--component c--secondary-header -->\n<\/div><\/div><!-- c--component c--secondary-navigation -->\n\n    <\/div><!-- cc--component-container cc--div -->\n\n\n    <section class=\"cc--component-container cc--heading-description vertical  heading-description color-white\">\n\n<div class=\"c--component c--heading-description\">\n        \n<div class=\"inner-wrapper\">\n    <div class=\"text-container\">\n\t\t        <div class=\"cta-container\">\n\t\t\t<div class=\"f--field f--description \"><h2><strong>The purpose<\/strong><\/h2>\n<p>Rutgers Risk, Policy and Compliance Hybrid Entity Risk Assessment process analyzes identified hybrid entities under the Health Insurance Portability and Accountability Act (HIPAA) whose business activities include both covered and non-covered functions within the institution.<\/p>\n<p>Rutgers Covered Entity: The collective term referring to all units, schools or departments that meet the definition of a \u201cCovered Entity\u201d as defined under 45 CFR 160.103 are required to follow HIPAA regulation, including the HITECH Act (2009), the Omnibus Rule (2013) and related state and federal law.<\/p>\n<h2><strong>The process<\/strong><\/h2>\n<p>The purpose of the hybrid risk assessment application is to understand the current framework and environment and to identify risks by evaluating the information\/data obtained. All relevant information is considered by default and should include:<\/p>\n<ul>\n<li>Appropriate review of current safety protocols, practices, guidelines and procedures.<\/li>\n<li>Analyze assets\u2019 threats and vulnerabilities, including their impacts and likelihood.<\/li>\n<li>Map asset and vulnerability threats to help identify potential combinations of threats. A certain vulnerability or even multiple vulnerabilities may be associated with each threat. It is not a risk to a property unless a threat exploits a vulnerability.<\/li>\n<li>Develop practical technical recommendations to address the vulnerabilities identified and reduce the level of security risk.<\/li>\n<li>Produce and submit a risk assessment report.<\/li>\n<\/ul>\n<\/div><!-- f--field f--description -->\n<div class=\"f--field f--link \">\n<a\n        class=\"button\"\n\t        href=\"https:\/\/forms.office.com\/Pages\/ResponsePage.aspx?id=IystuTVNcEST_2mspmMv_vNV1GTfz6VMtu11uPaiSw5UNjE5SERERlNaSFBMNkE2MjNWQlRKWlBJVSQlQCN0PWcu\"\n\t\t\t target=\"_blank\"\t\t>Request a Hybrid Risk Assessment<\/a>\n\n<\/div><!-- f--field f--link -->\n        <\/div>\n    <\/div>\n<\/div>\n<\/div><!-- c--component c--heading-description -->\n\n    <\/section><!-- cc--component-container cc--section -->\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":992,"featured_media":0,"parent":647,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"page-category":[],"class_list":["post-873","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hybrid Entity Risk Assessments - Information Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hybrid Entity Risk Assessments - Information Security\" \/>\n<meta property=\"og:url\" content=\"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/\" \/>\n<meta property=\"og:site_name\" content=\"Information Security\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-20T18:42:21+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/hybrid-entity-risk-assessments\\\/\",\"url\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/hybrid-entity-risk-assessments\\\/\",\"name\":\"Hybrid Entity Risk Assessments - Information Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/#website\"},\"datePublished\":\"2020-04-28T15:19:20+00:00\",\"dateModified\":\"2025-02-20T18:42:21+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/hybrid-entity-risk-assessments\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/hybrid-entity-risk-assessments\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/hybrid-entity-risk-assessments\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Information Security\",\"item\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rutgers Risk Management Program\",\"item\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/information-security-risk-management-program\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Hybrid Entity Risk Assessments\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/#website\",\"url\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/\",\"name\":\"Information Security\",\"description\":\"A Rutgers IT Service\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/it.rutgers.edu\\\/information-security\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hybrid Entity Risk Assessments - Information Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/","og_locale":"en_US","og_type":"article","og_title":"Hybrid Entity Risk Assessments - Information Security","og_url":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/","og_site_name":"Information Security","article_modified_time":"2025-02-20T18:42:21+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/","url":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/","name":"Hybrid Entity Risk Assessments - Information Security","isPartOf":{"@id":"https:\/\/it.rutgers.edu\/information-security\/#website"},"datePublished":"2020-04-28T15:19:20+00:00","dateModified":"2025-02-20T18:42:21+00:00","breadcrumb":{"@id":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/hybrid-entity-risk-assessments\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Information Security","item":"https:\/\/it.rutgers.edu\/information-security\/"},{"@type":"ListItem","position":2,"name":"Rutgers Risk Management Program","item":"https:\/\/it.rutgers.edu\/information-security\/information-security-risk-management-program\/"},{"@type":"ListItem","position":3,"name":"Hybrid Entity Risk Assessments"}]},{"@type":"WebSite","@id":"https:\/\/it.rutgers.edu\/information-security\/#website","url":"https:\/\/it.rutgers.edu\/information-security\/","name":"Information Security","description":"A Rutgers IT Service","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/it.rutgers.edu\/information-security\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/users\/992"}],"replies":[{"embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/comments?post=873"}],"version-history":[{"count":32,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/873\/revisions"}],"predecessor-version":[{"id":4418,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/873\/revisions\/4418"}],"up":[{"embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/pages\/647"}],"wp:attachment":[{"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/media?parent=873"}],"wp:term":[{"taxonomy":"page-category","embeddable":true,"href":"https:\/\/it.rutgers.edu\/information-security\/wp-json\/wp\/v2\/page-category?post=873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}