News

Speak their language. Don’t talk too deeply about technology. But also remember to pitch the innovative ways that investing in security can improve the business, executives from Henry Ford, NIST, PwC, Texas Children's and others advise.

The new tool includes pricing and product limitation data to help make the process of selecting an electronic health record system less complex, according to National Coordinator Karen DeSalvo, MD. 

Leading up to the initial phase, slated to begin in the Pacific Northwest, the Defense Department is focusing on configuration more than customization, and program executive Stacy Cummings said that change management will be paramount.

There needs to be a better business case for sharing data because consumers expect it and HIPAA allows it, said National Coordinator Karen DeSalvo, MD. And Americans are growing increasingly impatient. 

For the U.S. to effectively digitize their infrastructure, the National Association of State CIOs said a stable and talented workforce is needed.

Healthcare IT News and HIMSS are accepting speaking proposals for the annual Big Data Healthcare Analytics Forum to be held in Boston, October 24-25. The deadline for submissions is 5 p.m. June 17. Submit a proposal today. Submissions are limited to healthcare providers and payer organizations, government agencies and academic institutions. Presentations should be practical, actionable and solutions-based. Case studies are a priority for this event. An anticipated 300 healthcare provider and payer organizations are expected to attend the forum. Proposals should focus on how provider and payer organizations are using analytics to, among other things, improve clinical care, patient safety, succeed at population health, reduce readmissions, treat high-risk patients, streamline operations and reduce the overall cost of healthcare. Twitter: @HealthITNews Like Healthcare IT News on Facebook and LinkedIn

Now that almost all U.S. hospital are using electronic health records, the industry is ready for the next phase of information sharing, improved outcomes and collecting the digital dividend.

By Mike Willingham, Vice President of Quality Assurance and Regulatory Affairs, Caradigm The mandate for healthcare information security is clear. Our industry has to raise the bar. We are reminded of this by the constant stream of breaches affecting healthcare providers such as the recent incidents impacting 21st Century Oncology and Hollywood Presbyterian Medical Center. Industry reports like this one from the Ponemon Institute state that healthcare organizations face cyberattacks every month and are still struggling to find effective strategies to keep systems secure. One of the core vulnerabilities facing healthcare is identity and access risk as that most healthcare organizations have vulnerabilities, but don’t realize their security strategies are insufficient. With frequent industry consolidation and the emergence of population health, information security is becoming increasingly more challenging to manage. Data is now being shared from a multitude of applications with both employed and non-employed physicians. Managing this risk is further complicated because it has multiple layers. You have to consider elevated privileges, remote and mobile access, multi-factor authentication, and balance these concerns with providing efficient access. While single-sign on (SSO) tools are often looked upon as the first line of defense in controlling identity and access risk, providers need additional capabilities because the threat landscape has evolved. Providers need to assume that insiders and outsiders with malicious intent are attempting to gain unauthorized access. In order to reduce this risk, providers need greater visibility so that they can be more diligent. This entails a major shift in philosophy to a more proactive strategy that is constantly managing credentials and access rather than just reacting. The key to succeeding with this approach is to leverage automation. With the exploding number of applications and clinicians that must be managed, security teams must use tools that can automate manual security related processes. Here are a few examples of how automation can help manage risk: Provisioning and de-provisioning processes, which provides consistency in the process, saves IT many hours of work and prevents errors User, entitlements and behavior data can be brought together in a single view so you have all the information you need to take action A governance, risk and compliance (GRC) dashboard can be set up with analytics to monitor and proactively manage risk efficiently (e.g. an orphaned accounts report) Real-time alerting can identify a potential incident as it happens to minimize damage Remediation can be simplified so that access can be removed or suspended in just a couple of clicks Given the increased threats we face, healthcare needs to change its approach to security and privacy. Ultimately, the key is greater due diligence, day in and day out. If we use tools that help us accomplish this, then we give ourselves the best chance to win this battle.  

Intermountain also led a $12 million funding round that Zebra said it will use to build out its analytics engine with machine learning algorithms for diagnosing imaging scans. 

Nearly two years after implementing workforce analytics, Robert Wood Johnson University Hospital has saved more than $10 million on costs by addressing staff issues and increasing employee engagement.