Healthcare infosec news, training, education - HealthcareInfoSecurity
WEBHealthInfoSecurity.com is your source for health industry information security related news, articles, interviews and analysis, focusing on electronic health records, health information exchanges, HIPAA and HITECH compliance, as well as the latest breaches to healthcare organizations and what it means for the industry and those directly affected.
Alleged HVAC Hack Shines Spotlight on OT Risks to Healthcare
WEBAug 18, 2021 · A hacking incident that reportedly targeted a Massachusetts-based vendor that provides HVAC systems to several Boston-area hospitals and others shines a spotlight on the growing cybersecurity risks involving IoT devices and OT equipment. See Also: Improving Security and Productivity Across the Identity Ecosystem.
Healthcare Information Security Training Webinars
WEBRuben Groenewoud - Elastic, Jonhnathan Ribeiro - Elastic • October 22, 2024 @ 11:30 AM (EDT) •. Knowing what’s coming is one thing, but preparing your environment is something else entirely. Utilizing insights from the 2024 Elastic Global Threat Report, this webinar will explore how you can maximize Elastic Security for upcoming threats.
The Essential Guide to HITECH Act - HealthcareInfoSecurity
WEBThe HITECH Act specifies that covered entities should limit uses and disclosures of personal health information to the "minimum necessary" to conduct a particular function. The U.S. Department of Health and Human Services is expected to issue regulations this year governing the "minimum necessary" provisions.
Kaiser Plan Reaches Breach Settlement - HealthcareInfoSecurity
WEBThe settlement comes after a formal complaint that the attorney general filed against Kaiser Foundation Health Plan for failing to disclose in a timely manner a breach that affected more than 30,000 current and former employees and for exposing Social Security numbers in the breach. As a "legal formality," the attorney general filed both the ...
HITRUST Tackles Data De-Identification - HealthcareInfoSecurity
WEBJul 12, 2012 · The initial guidance, to be released in the third quarter, will define multiple levels of de-identification and recommend specific use cases for data in each tier. "The intent of the HITRUST De-Identification Working Group is to establish a uniform and practical approach to data de-identification that balances the risks and benefits of using ...
XP Device Support Ends: Now What? - HealthcareInfoSecurity
WEBApr 7, 2014 · 00:00. Healthcare organizations using medical devices that run on the Windows XP platform, which is no longer supported, need to have short- and long-term strategies to address cybersecurity, says medical device security researcher Kevin Fu. Microsoft no longer offers software updates for the Windows XP operating system, including new features ...
Michael Mucha: Risk Management at Stanford
WEB00:00. 00:00. Widespread implementation of encryption is a top priority at Stanford Hospital and Clinics, thanks, in large part, to the "safe harbor" in the HITECH breach notification rule, says Michael Mucha, information security officer. Organizations that use the proper form of encryption don't have to report data breaches under the HITECH Act.
2024 Healthcare Cybersecurity Benchmarking Study
WEBMar 26, 2024 · The 2024 Healthcare Cybersecurity Benchmarking Study — a collaboration between Censinet, KLAS, the American Hospital Association, Health-ISAC, and the Healthcare and Public Health Sector Coordinating Council — provides an overview on the state of healthcare cybersecurity preparedness, …
The Problems with Patient Identifiers - HealthcareInfoSecurity
WEBJan 29, 2010 · Poor management of patient identifiers also can lead to fraud, the report notes, including "manipulation of the system for illegal purposes such as drug seekers, drug diversion or medical identity theft." As a result, patient identity integrity is a key component in any effort to comply with the pending federal Identity Theft Red Flag rules ...