Kentucky REC Conference: Practical HIPAA Security Compliance Strategies
From Risk to Resilience: Practical HIPAA Security Compliance Strategies
Speakers: Amy Daley and Lindsey Steele, Kentucky REC along with Special Guest Kory Haas, Faith Healthcare
In 2026, OCR launched its “Risk Management Initiative” to highlight deficiencies identified during recent security incident investigations. Lack of security risk assessments and risk management activities were the two most common findings cited. While the HIPAA Security Rule is pending finalization, healthcare organizations can use OCR’s insights to proactively build a stronger, more defensible compliance program.
In this discussion, Kentucky REC HIPAA Security Advisors Amy Daley and Lindsey Steele, will be joined by guest speaker Kory Haas, IT Director and HIPAA Security Officer for Faith Healthcare, to share practical insights and real world perspectives from the field.
The session will focus on helping healthcare organizations translate risk findings into meaningful action through a three-step approach: Assess, Mitigate, and Document.
Attendees will gain a clearer understanding of how these foundational practices can address security gaps and strengthen their organization’s overall security posture.
About Amy Daley
Amy Daley, CHPS, has been a Health IT Advisor for Kentucky Regional Extension Center since 2014 and is the HIPAA Team Lead. She specializes in HIPAA Security guidance for healthcare organizations across the state of Kentucky. Amy obtained her B.S. in Computer Information Systems from the University of Louisville. Amy has been a guest speaker at various conferences in Kentucky presenting on topics related to HIPAA Security and Promoting Interoperability. Her background includes expertise in the areas of implementation, training and management of EHR systems.
About Lindsey Steele
Lindsey Steele is a Health IT Advisor for Kentucky REC specializing in HIPAA Security guidance and education. Lindsey’s expertise includes helping regulated entities across Kentucky identify and strengthen their security safeguards through risk assessments, mitigation strategies and conducting network vulnerability scans. Prior to joining Kentucky REC in 2024, Lindsey was a Health Information Technology Manager with more than 20 years of experience where she focused on management of EHR implementation and support, oversight of compliance and regulatory programs, and development of IT training programs for clinical and operational staff.
About Kory Haas
Kory Haas, PhD-IS, MS-IT, CSIS+, is an experienced healthcare technology leader, a graduate of the University of the Cumberlands, and the IT Director for Faith Healthcare, Inc. His work focuses on healthcare IT, HIPAA compliance, cybersecurity, risk management, and implementing secure, reliable technology systems that support patient care and protect sensitive health information.
Questions? Contact us at Kentucky REC or call us at 859-323-3090.
Alicia Anderson, MS, is a Practice Transformation Advisor and Dyad Team Lead with the Kentucky Regional Extension Center. She has more than 10 years of experience in healthcare quality improvement, health information management, and performance improvement. Ms Anderson partners with healthcare teams across Kentucky to advance quality improvement, practice transformation, and value-based care initiatives.
Jessica Elliott is the Lead Practice Transformation & Quality Improvement Advisor at the Kentucky Regional Extension Center. Jessica is a Certified Professional in Healthcare Quality (CPPS) and a Certified Professional in Patient Safety (CPPS). She has over 20 years of healthcare experience, including expertise in quality improvement implementation science and regulatory policy analysis. She partners with clinicians and healthcare organizations to design and implement strategies enhancing patient outcomes, optimizing care processes, and maximizing efficiencies in the transition to value-based care.
Dr. Cody Bumgardner is Associate Professor of Pathology and Laboratory Medicine and Assistant Dean for Artificial Intelligence and Data Science at the University of Kentucky College of Medicine, where he serves as Division Chief of Pathology Informatics and directs Biomedical Informatics for the Center for Clinical and Translational Science. He founded the UK Center for Applied Artificial Intelligence, and was recently named Executive Director of the Kentucky Center for Digital Innovation at the University of Louisville.
Romil Chadha, MD, MPH, MBA, is Chief Medical Information Officer at UK HealthCare and Professor of Internal Medicine, College of Medicine, University of Kentucky. A practicing physician and clinical informatician, he focuses on using technology, data, AI, and thoughtful system design to improve patient care, clinician experience, and healthcare operations.
Mark R. Hoffman, MD, is the Chief Medical Officer, Good Samaritan Hospital and Professor of Obstetrics and Gynecology, University of Kentucky College of Medicine. Dr. Hoffman’s primary research interests include uterine fibroids and outcomes following robotic surgery, and he is a member of the American Association of Gynecologic Laparoscopists and the American College of Obstetrics and Gynecology.
Kayla Staley is the Director of Patient Access, Experience & Digital Engagement at UK HealthCare, where she leads initiatives focused on improving the patient experience through digital innovation, access optimization, and operational transformation. With extensive experience in healthcare technology, Epic, patient engagement platforms, and enterprise process improvement, Kayla works at the intersection of clinical operations, technology, and strategy.
Trudi Matthews, Chief of Value-based Programs, Public Policy and Community Initiatives, Office of the Executive Vice President for Health Affairs, UK HealthCare; Executive Director, UK Kentucky Regional Extension Center (REC); Assistant Professor, College of Health Sciences
Healthcare Policy and Regulatory Update: What’s Next 
