Group releases security framework for health data
Wednesday, March 4, 2009
The Health Information Trust Alliance (HITRUST) released a security framework for health care organizations to safeguard patient records as there is a federal push to bring everything online with electronic health records (EHR).
HITRUST, which includes health care providers, pharmacies and biotech firms, based the framework on standards such as COBIT, NIST and ISO 270001.
According to the alliance, the framework improves adoption rates with regulations such as the Health Insurance Portability and Accountability Act (HIPAA) and will hopefully increase patient confidence in their medical information being safe in an online network.
"It's tailored to protecting health information right out of the gate," Michael Wilson, vice president and chief information security officer of pharmaceutical distributor McKesson, told SCMagazineus.com. "It's just a different sort of data. It's still structured [like other verticals], but there's a lot more of it in health care."
News of the network security framework follows the passing of the $787 billion economic stimulus bill which has dedicated approximately $20 billion for health care institutions to embrace EHRs. One of the stipulations in the bill stated EHRs needed heightened security.
Recently, medical data was found on P2P networks by using simple search terms and containing patients' Social Security numbers and insurance carrier names, Wired.com reports.
Related News:
Password security a tall order for many web users - 1.22.2010 A recently released study from tech researcher Imperva showed that the most popular password among users whose accounts were compromised in the recent RockYou data breach was as follows: 123456.
Facebook fixes "wrong friends list" mobile network security glitch - 1.22.2010 CNET reports that social media network Facebook has repaired a problem in the mobile version of its service that caused some mobile users to have full access to the friends lists of unassociated users.
Automated phishing scam hits bank customers - 1.14.2010 Phishing attacks do not target victims exclusively via email, experts say, pointing to a recent rash of automated phone calls that attempted to convince victims to give up sensitive banking information.
Scammers ride aftershocks of Haiti catastrophe - 1.14.2010 The Federal Bureau of Investigation has issued a warning to those who want to contribute to earthquake relief efforts in Haiti, saying that cyber criminals and other types of scam artists are trying to take advantage of an outpouring of humanitarian support.
Banking Trojans finding new vector with fake Outlook alerts - 1.11.2010 A spurious alert purporting to come from Microsoft Outlook has cropped up in recent weeks, according to a maker of email filtering software.
|