From Risk to Resilience: Practical HIPAA Security Compliance Strategies
Speakers: Amy Daley and Lindsey Steele, Kentucky REC along with Special Guest Kory Haas, Faith Healthcare
In 2026, OCR launched its “Risk Management Initiative” to highlight deficiencies identified during recent security incident investigations. Lack of security risk assessments and risk management activities were the two most common findings cited. While the HIPAA Security Rule is pending finalization, healthcare organizations can use OCR’s insights to proactively build a stronger, more defensible compliance program.
In this discussion, Kentucky REC HIPAA Security Advisors Amy Daley and Lindsey Steele, will be joined by guest speaker Kory Haas, IT Director and HIPAA Security Officer for Faith Healthcare, to share practical insights and real world perspectives from the field.
The session will focus on helping healthcare organizations translate risk findings into meaningful action through a three-step approach: Assess, Mitigate, and Document.
Attendees will gain a clearer understanding of how these foundational practices can address security gaps and strengthen their organization’s overall security posture.
About Amy Daley
Amy Daley, CHPS, has been a Health IT Advisor for Kentucky Regional Extension Center since 2014 and is the HIPAA Team Lead. She specializes in HIPAA Security guidance for healthcare organizations across the state of Kentucky. Amy obtained her B.S. in Computer Information Systems from the University of Louisville. Amy has been a guest speaker at various conferences in Kentucky presenting on topics related to HIPAA Security and Promoting Interoperability. Her background includes expertise in the areas of implementation, training and management of EHR systems.
About Lindsey Steele
Lindsey Steele is a Health IT Advisor for Kentucky REC specializing in HIPAA Security guidance and education. Lindsey’s expertise includes helping regulated entities across Kentucky identify and strengthen their security safeguards through risk assessments, mitigation strategies and conducting network vulnerability scans. Prior to joining Kentucky REC in 2024, Lindsey was a Health Information Technology Manager with more than 20 years of experience where she focused on management of EHR implementation and support, oversight of compliance and regulatory programs, and development of IT training programs for clinical and operational staff.
About Kory Haas
Kory Haas, PhD-IS, MS-IT, CSIS+, is an experienced healthcare technology leader, a graduate of the University of the Cumberlands, and the IT Director for Faith Healthcare, Inc. His work focuses on healthcare IT, HIPAA compliance, cybersecurity, risk management, and implementing secure, reliable technology systems that support patient care and protect sensitive health information.
Questions? Contact us at Kentucky REC or call us at 859-323-3090.
