Healthcare infosec news, training, education - HealthcareInfoSecurity
WEBHealthInfoSecurity.com is your source for health industry information security related news, articles, interviews and analysis, focusing on electronic health records, health information exchanges, HIPAA and HITECH compliance, as well as the latest breaches to healthcare organizations and what it means for the industry and those directly affected.
Latest research surveys on healthcare information security
WEBGaining Security Visibility and Insights Throughout the Identity Ecosystem Survey. January 5, 2024. Unlock the power of enhanced identity and access management! Your anonymous insights are critical in shaping the future of risk prevention and remediation. Participate today in our brief 3-5min survey and be a catalyst for transformative change ...
HIPAA Omnibus and Offshore Vendors - HealthcareInfoSecurity
WEBAug 14, 2013 · Marianne Kolbasuk McGee (HealthInfoSec) • August 14, 2013. Credit Eligible. Get Permission. Under the HIPAA Omnibus Rule, business associates and subcontractors are directly liable for HIPAA compliance, including penalties for data breaches. And enforcement actions by federal regulators can range up to $1.5 million per HIPAA violation.
Building a Hospital Security Structure - HealthcareInfoSecurity
WEBDeciding what functions to centralize and what functions to leave distributed is the first step toward determining how to staff and structure your security operations. Keeping aspects of information security decentralized enhances the flexibility of your organization because it distributes overhead.
7 Steps to Building a Security Program - HealthcareInfoSecurity
WEBRisk Assessments. Security Awareness Programs & Computer-Based Training. Security Operations. Standards, Regulations & Compliance. Credit Eligible. Get Permission. To build an effective information security program, healthcare organizations need to take seven essential steps, including updating a risk assessment, says.
Handling Security in a Centralized HIE - HealthcareInfoSecurity
WEBAug 28, 2012 · Handling Security in a Centralized HIE. As those developing health information exchanges weigh various data architecture models, the CEO of Maine's HealthInfoNet argues that its model, which relies on a central data repository, offers the best security. Devore Culver contends the main alternative to a central repository model - …
Live Webinar | Demonstrating the Value of Your Cybersecurity ...
WEBExplore how cybersecurity leaders are successfully demonstrating the value of their cybersecurity programs through a risk-based approach. Gain insights into real-world examples and strategies that have secured resources, support, and budgets by effectively communicating risks to various audiences. Join this webinar to learn more about: Aligning ...
A CISO Describes Why 'Identity' Is Central Aspect of Security
WEBAug 24, 2021 · Joey Johnson, CISO, Premise Health. Joey Johnson, CISO of Premise Health, a Brentwood, Tennessee-based provider of online healthcare services, outlines a three-pillar security program in which "identity is the central aspect."See Also: Ransomware Intelligence Briefing: Key Insights for the C-Level Johnson describes the first pillar as "understanding the data, where it is and how it behaves."
The Essential Guide to HITECH Act - HealthcareInfoSecurity
WEBFeb 8, 2010 · The HITECH Act specifies that covered entities should limit uses and disclosures of personal health information to the "minimum necessary" to conduct a particular function. The U.S. Department of Health and Human Services is expected to issue regulations this year governing the "minimum necessary" provisions.
Building Security Awareness Among Docs - HealthcareInfoSecurity
WEBMay 13, 2010 · The best way to persuade physicians to take information security seriously is to explain the business risks involved, says Robert Tennant, senior policy analyst with the Medical Group Management Association, the trade group for physician group practice administrators. "If they have a breach, they could go out of business if they don't do things the right way," Tennant stresses.