Healthcare Information Security and Privacy (All-In-One) by Sean Murphy

Author:Sean Murphy
Language: eng
Format: mobi, epub, azw3
Publisher: McGraw-Hill Education
Published: 2015-01-09T08:00:00+00:00

NOTE Depending on the type of exploit or attack, the incident response team will tailor its actions. If the incident is entirely internal (a lost removable media), certain actions are taken. If the exploit is a malicious piece of software found in an electronic health record (EHR), a different set of actions would be taken. That said, the variety and uncertainty surrounding the nature of the incidents make it imperative to build scenarios and practice the response before the incidents happen.

Here are some examples of relevant responsibilities that are accomplished within the detection and analysis phase:

• Initially evaluating whether there is actually an incident (interrogate false positives)

• Analyzing the precursors and indicators

• Looking for correlating information across the enterprise or complaints from end users

• Searching available incident reporting resources (Internet, internal case files, and so on)

• As more information about the incident surfaces, assessing prioritization or severity ratings

• Determining the internal or external nature of the incident (here will be a variety of possibilities of how much impact the incident is expected to have)

• Escalating results from the incident to keep senior management informed and, if required, getting additional resources or assistance from other departments such as the privacy office, legal review, or human resources

• Engaging system administrators or owners of infiltrated systems, as needed

• Collecting data relative to time and material used to investigate these incidents because they involve so many people from the healthcare organization

• The “downtime” is often forgotten at the end of a data incident. Even other types of breaches require a great deal of this downtime away from the regular healthcare mission. It comes at a cost.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.