SlideShare a Scribd company logo
PRACTICAL APPROACH TO PATIENT
DATA SECURITY
(a quick primer)

Sameer Sule
Healthcare Technology Consultant
KINARA | INSIGHTS
creating value through technology
ePHI: Security Rule Compliance




Don’t assume that if the technology is
compliant, the organization is also compliant.
Compliance is achieved by a combination of:








2/24/2014

Technology
Policies and Procedures
Documentation
Employee Training
Strict enforcement and sanctions
Regular review and updating
www.kinarainsights.com

2
The Big Picture

2/24/2014

www.kinarainsights.com

3
Six Essential Components


Risk Analysis





Identify threats & vulnerabilities to ePHI
Implement measures to mitigate threats

Systems and Network Management



Monitor computer systems and network
Proactively detect potential security and
maintenance issues

2/24/2014

www.kinarainsights.com

4
Six Essential Components


Contingency Planning







Data backup plan
Disaster recovery plan
Emergency mode of operations plan

Mobile Device Management




Protect ePHI on laptops, smartphones, tablets,
USB sticks etc
Enable encryption, device tracking, remote
data wipeout

2/24/2014

www.kinarainsights.com

5
Six Essential Components


Policies, Procedures & Training







Develop clear written policies & procedures
Conduct regular data security training for staff
Enforce policies

Periodic Testing & Revision



Review security plan regularly
Update plan as needed to accommodate
changes in technology, people/processes

2/24/2014

www.kinarainsights.com

6
A practical approach to data security


Don’t do everything all at once



Take a step-wise approach



Start with a comprehensive risk analysis



Build a strong foundation

2/24/2014

www.kinarainsights.com

7
Data security and compliance



Requires planning
Needs to be meticulous
Takes coordination between people in
different departments
Requires an investment of time



Is on-going






2/24/2014

www.kinarainsights.com

8
Implementation


Do it yourself or get outside help



Customize policies to your organization



Implement reasonable and appropriate
security measures for your organization

2/24/2014

www.kinarainsights.com

9
THANK YOU
CONTACT
Sameer Sule
Healthcare Technology Consultant
Author: “Protecting Electronic Health Information: A Practical Approach
to Patient Data Security in Your Healthcare Practice”
Amazon: http://www.amazon.com/author/sameersule
Blog: http://www.kinarainsights.com/blog.html
Linkedin: http://www.linkedin.com/pub/sameer-sule/7/b1b/511
Twitter:@sameersule

2/24/2014

www.kinarainsights.com

10

More Related Content

Viewers also liked

PPT TIK
PPT TIKPPT TIK
PPT TIK
09022014
 
1 introducing embedded systems and the microcontrollers
1 introducing embedded systems and the microcontrollers1 introducing embedded systems and the microcontrollers
1 introducing embedded systems and the microcontrollers
Victor Nyamhotsi
 
Interesting faqts
Interesting faqtsInteresting faqts
Interesting faqts
Nino Bunturi
 
London 343
London 343London 343
London 343
Andrijanova
 
HR 29-05-2015, NJ 2015 / 293
HR 29-05-2015, NJ 2015 / 293HR 29-05-2015, NJ 2015 / 293
HR 29-05-2015, NJ 2015 / 293
MuldersAdvocaten
 
1 pergeseran paradigma pendidikan
1 pergeseran paradigma pendidikan1 pergeseran paradigma pendidikan
1 pergeseran paradigma pendidikan09022014
 
Etwinning
EtwinningEtwinning
Etwinning
Nino Bunturi
 

Viewers also liked (7)

PPT TIK
PPT TIKPPT TIK
PPT TIK
 
1 introducing embedded systems and the microcontrollers
1 introducing embedded systems and the microcontrollers1 introducing embedded systems and the microcontrollers
1 introducing embedded systems and the microcontrollers
 
Interesting faqts
Interesting faqtsInteresting faqts
Interesting faqts
 
London 343
London 343London 343
London 343
 
HR 29-05-2015, NJ 2015 / 293
HR 29-05-2015, NJ 2015 / 293HR 29-05-2015, NJ 2015 / 293
HR 29-05-2015, NJ 2015 / 293
 
1 pergeseran paradigma pendidikan
1 pergeseran paradigma pendidikan1 pergeseran paradigma pendidikan
1 pergeseran paradigma pendidikan
 
Etwinning
EtwinningEtwinning
Etwinning
 

Recently uploaded

Research, Monitoring and Evaluation, in Public Health
Research, Monitoring and Evaluation, in Public HealthResearch, Monitoring and Evaluation, in Public Health
Research, Monitoring and Evaluation, in Public Health
aghedogodday
 
EXAMINATION OF HUMAN URINE AND FAECES.pdf
EXAMINATION OF HUMAN URINE AND FAECES.pdfEXAMINATION OF HUMAN URINE AND FAECES.pdf
EXAMINATION OF HUMAN URINE AND FAECES.pdf
Madhusmita Sahoo
 
PRESSURE INJURY CARE AND MANAGEMENT FOR HCW
PRESSURE INJURY CARE AND MANAGEMENT FOR HCWPRESSURE INJURY CARE AND MANAGEMENT FOR HCW
PRESSURE INJURY CARE AND MANAGEMENT FOR HCW
dnee1
 
Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...
Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...
Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...
Lighthouse Retreat
 
Solution manual for managerial accounting 18th edition by ray garrison eric n...
Solution manual for managerial accounting 18th edition by ray garrison eric n...Solution manual for managerial accounting 18th edition by ray garrison eric n...
Solution manual for managerial accounting 18th edition by ray garrison eric n...
rightmanforbloodline
 
Sectional dentures for microstomia patients.pptx
Sectional dentures for microstomia patients.pptxSectional dentures for microstomia patients.pptx
Sectional dentures for microstomia patients.pptx
SatvikaPrasad
 
HEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptx
HEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptxHEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptx
HEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptx
Rommel Luis III Israel
 
一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理
一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理
一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理
xkute
 
Satisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa Ajman
Satisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa AjmanSatisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa Ajman
Satisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa Ajman
Malayali Kerala Spa Ajman
 
FACIAL NERVE
FACIAL NERVEFACIAL NERVE
FACIAL NERVE
aditigupta1117
 
Simple Steps to Make Her Choose You Every Day
Simple Steps to Make Her Choose You Every DaySimple Steps to Make Her Choose You Every Day
Simple Steps to Make Her Choose You Every Day
Lucas Smith
 
nursing management of patient with Empyema ppt
nursing management of patient with Empyema pptnursing management of patient with Empyema ppt
nursing management of patient with Empyema ppt
blessyjannu21
 
DAHL APPROACH a novel technique to raise bite
DAHL APPROACH a novel technique to raise biteDAHL APPROACH a novel technique to raise bite
DAHL APPROACH a novel technique to raise bite
SuraiyaTaranum
 
一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理
一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理
一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理
obowu
 
National Rural Health Mission(NRHM).pptx
National Rural Health Mission(NRHM).pptxNational Rural Health Mission(NRHM).pptx
National Rural Health Mission(NRHM).pptx
Jyoti Chand
 
Data-Driven Dispensing- Rise of AI in Pharmacies.pdf
Data-Driven Dispensing- Rise of AI in Pharmacies.pdfData-Driven Dispensing- Rise of AI in Pharmacies.pdf
Data-Driven Dispensing- Rise of AI in Pharmacies.pdf
Jasper Colin
 
Test bank clinical nursing skills a concept based approach 4e pearson educati...
Test bank clinical nursing skills a concept based approach 4e pearson educati...Test bank clinical nursing skills a concept based approach 4e pearson educati...
Test bank clinical nursing skills a concept based approach 4e pearson educati...
rightmanforbloodline
 
Know Latest Hiranandani Hospital Powai News.pdf
Know Latest Hiranandani Hospital Powai News.pdfKnow Latest Hiranandani Hospital Powai News.pdf
Know Latest Hiranandani Hospital Powai News.pdf
Dr. Sujit Chatterjee CEO Hiranandani Hospital
 
05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx
05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx
05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx
Santhosh Raj
 
Electrocardiogram_20240614_173859_0000.pdf
Electrocardiogram_20240614_173859_0000.pdfElectrocardiogram_20240614_173859_0000.pdf
Electrocardiogram_20240614_173859_0000.pdf
Elackkiya Balamurugan
 

Recently uploaded (20)

Research, Monitoring and Evaluation, in Public Health
Research, Monitoring and Evaluation, in Public HealthResearch, Monitoring and Evaluation, in Public Health
Research, Monitoring and Evaluation, in Public Health
 
EXAMINATION OF HUMAN URINE AND FAECES.pdf
EXAMINATION OF HUMAN URINE AND FAECES.pdfEXAMINATION OF HUMAN URINE AND FAECES.pdf
EXAMINATION OF HUMAN URINE AND FAECES.pdf
 
PRESSURE INJURY CARE AND MANAGEMENT FOR HCW
PRESSURE INJURY CARE AND MANAGEMENT FOR HCWPRESSURE INJURY CARE AND MANAGEMENT FOR HCW
PRESSURE INJURY CARE AND MANAGEMENT FOR HCW
 
Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...
Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...
Psychedelic Retreat Portugal - Escape to Lighthouse Retreats for an unforgett...
 
Solution manual for managerial accounting 18th edition by ray garrison eric n...
Solution manual for managerial accounting 18th edition by ray garrison eric n...Solution manual for managerial accounting 18th edition by ray garrison eric n...
Solution manual for managerial accounting 18th edition by ray garrison eric n...
 
Sectional dentures for microstomia patients.pptx
Sectional dentures for microstomia patients.pptxSectional dentures for microstomia patients.pptx
Sectional dentures for microstomia patients.pptx
 
HEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptx
HEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptxHEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptx
HEALTH ASSESSMENT IN NURSING USING THE NURSING PROCESSpptx
 
一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理
一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理
一比一原版(UoA毕业证)昆士兰科技大学毕业证如何办理
 
Satisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa Ajman
Satisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa AjmanSatisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa Ajman
Satisfying Spa Massage Experience at Just 99 AED - Malayali Kerala Spa Ajman
 
FACIAL NERVE
FACIAL NERVEFACIAL NERVE
FACIAL NERVE
 
Simple Steps to Make Her Choose You Every Day
Simple Steps to Make Her Choose You Every DaySimple Steps to Make Her Choose You Every Day
Simple Steps to Make Her Choose You Every Day
 
nursing management of patient with Empyema ppt
nursing management of patient with Empyema pptnursing management of patient with Empyema ppt
nursing management of patient with Empyema ppt
 
DAHL APPROACH a novel technique to raise bite
DAHL APPROACH a novel technique to raise biteDAHL APPROACH a novel technique to raise bite
DAHL APPROACH a novel technique to raise bite
 
一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理
一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理
一比一原版布里斯托大学毕业证(Bristol毕业证书)学历如何办理
 
National Rural Health Mission(NRHM).pptx
National Rural Health Mission(NRHM).pptxNational Rural Health Mission(NRHM).pptx
National Rural Health Mission(NRHM).pptx
 
Data-Driven Dispensing- Rise of AI in Pharmacies.pdf
Data-Driven Dispensing- Rise of AI in Pharmacies.pdfData-Driven Dispensing- Rise of AI in Pharmacies.pdf
Data-Driven Dispensing- Rise of AI in Pharmacies.pdf
 
Test bank clinical nursing skills a concept based approach 4e pearson educati...
Test bank clinical nursing skills a concept based approach 4e pearson educati...Test bank clinical nursing skills a concept based approach 4e pearson educati...
Test bank clinical nursing skills a concept based approach 4e pearson educati...
 
Know Latest Hiranandani Hospital Powai News.pdf
Know Latest Hiranandani Hospital Powai News.pdfKnow Latest Hiranandani Hospital Powai News.pdf
Know Latest Hiranandani Hospital Powai News.pdf
 
05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx
05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx
05 CLINICAL AUDIT-ORTHO done at a peripheral.pptx
 
Electrocardiogram_20240614_173859_0000.pdf
Electrocardiogram_20240614_173859_0000.pdfElectrocardiogram_20240614_173859_0000.pdf
Electrocardiogram_20240614_173859_0000.pdf
 

Practical approach to patient data security - A quick primer

  • 1. PRACTICAL APPROACH TO PATIENT DATA SECURITY (a quick primer) Sameer Sule Healthcare Technology Consultant KINARA | INSIGHTS creating value through technology
  • 2. ePHI: Security Rule Compliance   Don’t assume that if the technology is compliant, the organization is also compliant. Compliance is achieved by a combination of:       2/24/2014 Technology Policies and Procedures Documentation Employee Training Strict enforcement and sanctions Regular review and updating www.kinarainsights.com 2
  • 4. Six Essential Components  Risk Analysis    Identify threats & vulnerabilities to ePHI Implement measures to mitigate threats Systems and Network Management   Monitor computer systems and network Proactively detect potential security and maintenance issues 2/24/2014 www.kinarainsights.com 4
  • 5. Six Essential Components  Contingency Planning     Data backup plan Disaster recovery plan Emergency mode of operations plan Mobile Device Management   Protect ePHI on laptops, smartphones, tablets, USB sticks etc Enable encryption, device tracking, remote data wipeout 2/24/2014 www.kinarainsights.com 5
  • 6. Six Essential Components  Policies, Procedures & Training     Develop clear written policies & procedures Conduct regular data security training for staff Enforce policies Periodic Testing & Revision   Review security plan regularly Update plan as needed to accommodate changes in technology, people/processes 2/24/2014 www.kinarainsights.com 6
  • 7. A practical approach to data security  Don’t do everything all at once  Take a step-wise approach  Start with a comprehensive risk analysis  Build a strong foundation 2/24/2014 www.kinarainsights.com 7
  • 8. Data security and compliance  Requires planning Needs to be meticulous Takes coordination between people in different departments Requires an investment of time  Is on-going    2/24/2014 www.kinarainsights.com 8
  • 9. Implementation  Do it yourself or get outside help  Customize policies to your organization  Implement reasonable and appropriate security measures for your organization 2/24/2014 www.kinarainsights.com 9
  • 10. THANK YOU CONTACT Sameer Sule Healthcare Technology Consultant Author: “Protecting Electronic Health Information: A Practical Approach to Patient Data Security in Your Healthcare Practice” Amazon: http://www.amazon.com/author/sameersule Blog: http://www.kinarainsights.com/blog.html Linkedin: http://www.linkedin.com/pub/sameer-sule/7/b1b/511 Twitter:@sameersule 2/24/2014 www.kinarainsights.com 10