With increasing federal scrutiny of health care data breaches, maintaining a secure network and clinical infrastructure is crucial for both payers and providers. Topics here include: data breaches, data encryption and other security techniques, access and authentication issues, and regulatory requirements.
The HHS Office for Civil Rights, once again, is promising that its expanded HIPAA privacy/security/breach notification audit program will soon start.
Healthcare organizations generally understand that common information security threats originate from employee actions, cyber attacks, theft and loss, and identity theft. But did you know that a providers supply chain also is a major potential source of breaches? During a presentation at the 2015 AHIMA Convention, Mac McMillan, CEO at information technology and compliance services firm CynergisTek, identified some of the biggest threats, ranked by frequency.
Over the years, the role of information security teams has evolved from primarily a user access management and security operations function, to a holistic information risk management function.
Aaron Hayden is an information systems analyst with CliftonLarsonAllen, a large certified public accounting firm. Hes also an ethical hacker, one of 40 in the organization. And they are 100 percent successful hacking any business, except a bank.
Top health information security risks havent changed much in 10 years; theft or loss of data is still No. 1 in the number of incidents, Mac McMillan, CEO of IT security and compliance services firm CynergisTek said at the AHIMA Convention in New Orleans. But the entire security landscape has changed.
The Office of the National Coordinator for Health Information Technology on Monday released the final Federal Health IT Strategic Plan for 2015-2020, aimed at modernizing the nations health IT infrastructure beyond just electronic health records.
You only need to skim the news to know there are immense changes underway in our countrys healthcare system. This has been spurred on not only by technology, but also the new healthcare economy due to the influx of consumers under the Affordable Care Act. While the $3.8 trillion U.S. healthcare industry stretches to adapt to these changes, there are unquestionably issues that our industry must confront.
A physicians stolen laptop that wasnt properly backed up is compelling LSU Health Sciences Center in New Orleans to take the unusual step of publicly identifying the physician to better ensure all affected patients may be identified.
Health Data Management asked three health information technology security professionalsattorney Howard Burde of Howard Burde Health Law, Tom Walsh of tw-Security, and David Holtzman of CynergisTekthe following question: What is the single most important thing a healthcare organization should do, but isnt doing, to lower their risk of being hacked?
With increasing networked medical devices and sensors in healthcare, the Federal Bureau of Investigations cyber alert warning last week about the vulnerabilities of the Internet of Things (IoT) and the opportunities they pose for exploitation by cybercriminals is a wakeup call for the industry.
The Federal Bureau of Investigation has issued an alert warning companies and the public about the cybersecurity risks that networked medical devices and wearable sensors pose to consumers.
The healthcare industry accounted for 21.1 percent of data breaches in the first half of 2015the highest percentage of any industry, and remains the most vulnerable sector to cyber attacks.
Mobile devices are everywhere in healthcare organizations with clinicians, staff, patients and visitors routinely on a device. The devices that providers use often contain protected health information. Andrew Hoog, CEO at mobile security platform vendor NowSecure, says the average device connects to more than 160 unique IP addresses each day. Hoog offers 10 tips to boost your mobile security.
Whether Excellus BlueCross BlueShield learned that it had suffered a cyber attack because the organization or a contractor was looking for signs of hacking, or learned from a law enforcement agency is not clear, as the company isnt saying much about the incident outside of formal announcements.
In announcing its information network had been hacked and protected health information for 10 million individuals may have been compromised, Excellus BlueCross BlueShield used a familiar phrase in its notice.