| Description |
1 online resource (xi, 167 pages) : illustrations (some color) |
|
text file PDF rda |
| Bibliography |
Includes bibliographical references and index. |
| Summary |
This book outlines the new regulatory regime, and provides IT professionals with the processes and protocols, standards, and governance tools they need to maintain a secure and legal environment for data and records. Topics covered include : identity and access management systems; proper application design; physical and environmental safeguards; systemwide and client-based security configurations; safeguards for patient data; training and auditing procedures; governance and policy administration; the basics of HITECH, HIPAA, and other federal laws driving change in healthcare IT; how to identify the core issues of privacy and security in a healthcare environment; the steps required to develop and execute a security project plan; the technologies and tools available to aid in the process of deploying a secure EHR system; the core regulatory issues and practical matters of security in a healthcare environment; the frameworks and methodology that will assist in tackling the issues of privacy and security; and the technologies impacted by matters of privacy and security along with proposals for managing them effectively. This book is for healthcare professionals who work in information technology, information security, health information management, as well as in the more specialized areas of privacy, compliance, and informatics. The book is also useful for consultants working in the field of information security, EMR vendors, and technology professionals seeking to make an entry into the world of healthcare IT. |
| Contents |
Introduction -- Part I: The evolution of a monster. Waking the sleeping giant -- It's not just HIPAA -- Part II: Divide and conquer: defining ownership to develop solutions. Assembling the team -- Sifting through the wreckage -- Review your policies and develop a plan -- Part III: Sustainable solutions. Identity and access management -- Application design -- Access validation process -- Physical and environmental safeguards -- Systemwide and client-based security -- Safeguarding patient data from prying eyes -- Part IV: From project to program: transitioning to a sustainable support model. People, the most crucial element -- Business associates -- Security project versus operational support -- Putting the plan in place -- Part V: Appendices. Appendix A: sample business associate agreement -- Appendix B: sample rules of behavior for privileged user accounts -- Appendix C: breach notification process. |
| Language |
English. |
| Subject |
Medical records -- Access control.
|
|
Medical records -- Data processing.
|
|
Data encryption (Computer science)
|
|
Data protection.
|
|
Medical Records -- standards |
|
Protection de l'information (Informatique) |
|
Chiffrement (Informatique) |
|
Dossiers médicaux -- Accès -- Contrôle. |
|
Dossiers médicaux -- Informatique. |
|
Data protection |
|
Data encryption (Computer science) |
|
Medical records -- Access control |
|
Medical records -- Data processing |
| Cover Title |
Healthcare information privacy + security |
| In: |
Springer eBooks |
| Other Form: |
Print version: Robichau, Bernard Peter. Healthcare information privacy and security. California : Apress, 2014 1430266767 (DLC) 2013454344 (OCoLC)884305173 |
| ISBN |
9781430266778 (electronic bk.) |
|
1430266775 (electronic bk.) |
|
(print) |
|
(print) |
| Standard No. |
10.1007/978-1-4302-6677-8 doi |
|
10.1007/978-1-4302-6 |
|
More Resources