Saturday 23 January 2016

A Complete Identity Platform Can Reduce Risk for the Healthcare Industry

As a Fellow of the Institute for Critical Infrastructure Technology (ICIT), I was able to contribute my expertise to the legislative brief entitled “Hacking Healthcare in 2016: Lessons the Healthcare Industry can Learn from the OPM Breach.” In the brief, the ICIT provides a comprehensive assessment of the threats and healthcare trends that have the greatest impact on health sector security, as well as solutions and strategies to improve resiliency. The report draws from the OPM breach, which is a prime example of the enormous consequences an organization can face by not maintaining and protecting integrated systems.

Specifically, this brief details:

  • The Healthcare System’s Adversaries (script kiddies, hacktivists, cybercriminals, cyberterrorists and Nation State Actors)
  • A Multi-Pronged Approach to Meaningful Cybersecurity (people, policies & procedures and technical controls)
  • Healthcare in a Digital Age (IoT, sensors, telehealth, remote monitoring, behavior modification devices, embedded devices, mobile applications and data sharing in the Cloud)
  • Legislation and Collaboration (21st Century Cures Act, telehealth solutions for veterans, telehealth access expansion, prescription drug monitoring, EHR interoperability, mHealth IRB)

My contribution focused on the ever-increasing risk surface and the causes of data loss through theft and error. It has been 20 years since congress passed and President Clinton signed into law the Health Insurance Portability & Accountability Act (HIPAA). This law was created so that people could leave a job, maintain healthcare, and ensure their patient records were safe. The legislation saw the risk factors for patient data loss and misuse. So HIPAA guidelines seek to protect how patient data is stored, used and shared. For the full article click here 



from health IT caucus http://ift.tt/1SDD9Hq
via IFTTT

No comments:

Post a Comment