EventSpan

Speaker:

Greg Porter

Speaker:

Randy Trzeciak

Full description:

Many experts in the healthcare industry believe that the key success factor in reducing healthcare costs, while at the same time improving quality, is the availability of useful medical information.  In fact, the Health Information Technology for Economic Clinical Health Act (HITECH), a component of the American Recovery and Reinvestment Act (ARRA) of 2009, has mandated the widespread adoption and use of electronic health record (EHR) technologies.  However, the productivity and efficiency gains that healthcare experts are hoping to achieve via EHR also come with a commensurate level of risk.  The new regulations have placed an increased responsibility on healthcare providers to protect information by imposing many new information security and privacy requirements, in addition to increasing compliance obligations and enforcement penalties.

How does a healthcare organization strike the proper balance between maximizing the opportunities of EHR and prudent, cost-effective mitigation of the security risks?

One of the primary goals of the CERT Program is to educate organizations about the appropriate use of technology, systems, and organizational management practices to mitigate attacks (both internal and external) on networked systems, limit damage, and ensure the continuity of critical services in spite of cyber related incidents, accidents, or failures.

Greg Porter, a CERT Visiting Scientist and healthcare information security expert, will discuss the effects of the new regulations on the healthcare industry and some of the essential elements that healthcare technology executives should consider in order to secure patient information and systems from external threats. Greg will also discuss the synergies between HITECH’s breach notification requirements and incident response programs. 

Randy Trzeciak, a senior member of the CERT technical staff and insider threat team lead, will discuss the increasing risks of insider threat within organizations, the key factors influencing an insider's decision to act, the technical and non-technical indicators and precursors of malicious acts, and the countermeasures that could improve the survivability and resiliency of the organization.

Intended audience:

Healthcare

Software Security