The risk landscape for Electronic Health Information: Where might risks lie?

• You’ve spent many years and millions of dollars implementing your EHR system- is the technical foundation secure?
• How can the compliance department easily demonstrate that records are being used correctly?
• You’re offering a web portal for its patients to book appointments and talk with physicians - is this opening another avenue for attack?
• Someone has compromised your records – who must you notify, and what do you tell them?
• The data center just got flooded - can your health records still be accessed?
• Are your developers writing solid software? Or are they introducing errors to the system?

Integrity, Availability, Confidentiality and Compliance- Can we supply the right information, at the right time, to the right provider while complying with Federal and State Regulations?

Integrity: Information must not be modified without authorization, either accidentally or intentionally. The provider must demonstrate to patients, partners, and regulators that information is being used in accordance with the law.

How we can help manage risk~

• Compliance Gap Assessments and Scorecards
• Monitoring System Design and Implementation
• Incident Response and Breach Notification
• Health Information Risk Dashboard Development

Availability: Information must be accessible whenever needed.

How we can help manage risk~

• Disaster Recovery Planning and Implementaion
• BCP/DR Tests and Exercises
• Business Continuity Planning and Implementation
• BCP/DR Program Assessment

Confidentiality: Information must not be disclosed to unauthorized individuals or systems.

How we can help manage risk~

• Security Risk Assessments
• Penetration Testing / Ethical Hacking
• Security Architecture Planning and Reviews
• Security Operations Review and Improvement
• Part Time CISO onsite 2 days per week
  24-hour turnaround time for email or phone contact
  Month-to-month commitment
  Responsibilities and performance metrics defined in advance

Governance and Compliance: The provider must demonstrate to patients, partners, and
regulators that information is being used in accordance with the law.

How we can help manage risk~

• Compliance Gap Assessments and Scorecards
• Incident Response and Breach Notification Process Design
• Monitoring System Design and Implementation
• Health Information Risk Dashboard Development

Read More About Risk Mangement Solutions >>>

About Us | Industry Focus | Employers | Your Career | Jobs |Services