Privacy & Security
Ian Mack, IT senior security analyst for the University of Virginia and the communications chair for the HIMSS Virginia Chapter, says those efforts can save lives and chart the direction of future initiatives.
The Health Care Cybersecurity and Resiliency Act of 2024 would provide grants to help healthcare organizations strengthen prevention and response - and push for better coordination between HHS and CISA.
The Office of Civil Rights could have initiated follow-up after discovering security flaws, but "rarely initiated these reviews when it identified serious compliance issues," according to the HHS inspector general's audit program review.
Anahi Santiago, chief information security officer at ChristianaCare, says the architecture to develop security programs is shifting as providers manage a larger number of partners in the supply chain and in hospital at home programs.
In its FISMA review for FY 2024, the watchdog agency said that the U.S. Health and Human Services was unable to meet managed and measurable maturity for core metrics.
Dr. Benoit Desjardins, professor at the University of Montreal, explains that attacks haven't changed. The interconnectedness of hospitals with each other and third parties means that, when one is impacted, the entire health system can be affected.
The typical chief information officer in healthcare is taking on more responsibility for determining strategy and digital transformation, with 84% of CIOs now part of their organization's executive leadership team.
George Pappas, healthcare cybersecurity expert and CEO of Intraprise Health, says HIPAA is just a baseline for new state regulations that include incident reporting within 72 hours.
Cybersecurity In Focus
A cybersecurity CEO offers advice on tactics healthcare CISOs and CIOs should use to protect sensitive telehealth data, and how providers can adopt a proactive security stance specific to virtual care.
For Global Health Equity Week, HIMSS senior principal of cybersecurity and privacy Lee Kim describes some of the ways how privacy and security intersect with health access and patient engagement – and how artificial intelligence can help.