Healthcare infosec news, training, education - HealthcareInfoSecurity
WEBHealthInfoSecurity.com is your source for health industry information security related news, articles, interviews and analysis, focusing on electronic health records, health information exchanges, HIPAA and HITECH compliance, as well as the latest breaches to healthcare organizations and what it means for the industry and those directly affected.
The Essential Guide to HITECH Act - HealthcareInfoSecurity
WEBFeb 8, 2010 · The HITECH Act specifies that covered entities should limit uses and disclosures of personal health information to the "minimum necessary" to conduct a particular function. The U.S. Department of Health and Human Services is expected to issue regulations this year governing the "minimum necessary" provisions.
Conducting a HIPAA Self-Assessment - HealthcareInfoSecurity
WEBOct 14, 2013 · The audit protocol used by federal regulators during the initial round of HIPAA compliance audits is a helpful tool for covered entities and business associates that are conducting a risk analysis and beefing up HIPAA compliance efforts, says security consultant Bill Miaoulis. Although the protocol, which is available online for free, will eventually be updated to reflect the HIPAA Omnibus ...
OIG: EHR Fraud Detection Inadequate - HealthcareInfoSecurity
WEBJan 9, 2014 · New Report's Findings. The OIG report released this week was based on an online survey conducted in January 2013 of nearly 20 CMS administrative and program integrity contractors that use EHRs to pay claims, identify improper Medicare payments and investigate fraud. For its report, OIG also reviewed guidance documents and policies on …
Connected Fitness Devices: The Growing Security Risks
WEBJul 2, 2021 · At-home fitness gear and other connected health devices pose growing privacy and security risks, says Ondrej Krehel, CEO and founder of cybersecurity and digital forensics firm LIFARS. For instance, if connected fitness gear is used during exercise in military or police facilities, fitness data about the performance of the team and other ...
DevSecOps in Healthcare: Critical Considerations
WEBDec 29, 2021 · As healthcare sector entities set out to better secure their cloud application development and management, there are several critical considerations they must not overlook, says Adrian Mayers, CISO of health insurer Premera Blue Cross.. For starters, one of the top challenges for many healthcare sector entities in their secure application development journey "is recognizing the need to move to ...
Patient Portals: Security Challenges - HealthcareInfoSecurity
WEBJan 9, 2014 · Healthcare providers are turning to patient portals to provide remote access to electronic health records. But privacy attorney Adam Greene says there are challenges when it comes to parents or guardians accessing the records of minors of a certain age. Because some minors have the right not to disclose certain medical information, such as ...
Latest interviews and insights on healthcare information security
WEBMarianne Kolbasuk McGee • July 17, 2024 18 Minutes. Healthcare groups should consider several key points about a recent Texas federal court ruling and its impact on the use of online tracker technology on the healthcare websites of HIPAA-regulated organizations, said privacy attorney Iliana Peters of the law firm Polsinelli. Endpoint Security.
HHS Lowers Some HIPAA Fines - HealthcareInfoSecurity
WEBApr 29, 2019 · OCR's biggest HIPAA financial penalty so far was a $16 million resolution agreement last year with health insurer Anthem Inc. in the wake of a cyberattack revealed in 2015, which impacted nearly 79 million individuals. In the agreement, the agency noted that the insurer settled multiple potential violations of the HIPAA privacy and security ...
2024 Healthcare Cybersecurity Benchmarking Study
WEBMar 26, 2024 · The 2024 Healthcare Cybersecurity Benchmarking Study — a collaboration between Censinet, KLAS, the American Hospital Association, Health-ISAC, and the Healthcare and Public Health Sector Coordinating Council — provides an overview on the state of healthcare cybersecurity preparedness, …