Privacy & Security

By Chris Bowen 06:09 am September 09, 2015
Broadly defined, software as a medical device is any app used by providers to make clinical decisions. An increasing number of those are now officially designated as FDA-regulated devices. Is it worth it to pursue this classification for your own software?
By Rick Kam 03:42 pm August 26, 2015
In many organizations today, incident response is run like a relay race, typically starting with information security and with each response function handing off to the next in sequence. With each leg, the clock is ticking, and at each handoff, vital information may be lost.
By Mac McMillan 10:57 am August 18, 2015
Healthcare requires an informed balance between delivering care and protecting patient information. That is best achieved when both IT and security staff have a close working knowledge of how the caregivers are using technology to get the mission done.
By Deborah Galea 09:12 am August 12, 2015
Given that healthcare organizations must sometimes exchange sensitive patient data with external parties, how can they ensure that this is done safely, protecting patient privacy and complying with HIPAA requirements?
By John Halamka 08:17 am August 11, 2015
For years, manufacturers of medical devices depended on the "kindness of stranger," assuming that devices would never be targeted by bad actors. Hospitals must do their best to isolate medical devices from the internet and from other computing devices that could infect them.
By Scott Rea 06:41 am July 31, 2015
Back in the old days -- say, a whole 10 years ago -- thieves had to be physically inside a healthcare facility to steal patient information. How times have changed.
By Rick Kam 09:26 am July 30, 2015
The dangers of data breach make for great headlines: data held for ransom, financial fraud, medical identity theft. But despite the risks of a breach, the most immediate threat in most security incidents is failure to comply with regulatory requirements.
By Nathan Wenzler 10:03 am July 29, 2015
Ponemon's recently published 2015 Study on Privacy & Data Security of Healthcare Data makes one point crystal clear: healthcare organizations must do more to protect sensitive patient information from the wide variety of data breach threats.
By Mary A. Chaput 09:06 am July 14, 2015
The massive data breach at the Office of Personnel Management has already brought down director Katherine Archuleta and launched a class-action lawsuit by the American Federation of Government Employees. It didn't have to happen.
illustration of locked devices
By Chris Bowen 08:53 am July 08, 2015
Millions of Americans now victims of medical identity theft. Who are the criminals behind this digital era crime wave? A foray into the online black market for stolen data is a surreal experience.

Most Read

The Daily Brief Newsletter