Protecting Patient Information

Protecting Patient Information: A Decision-Maker's Guide to Risk, Prevention, and Damage Control provides the concrete steps needed to tighten the information security of any healthcare IT system and reduce the risk of exposing patient health information (PHI) to the public. The book offers a systematic, 3-pronged approach for addressing the IT security deficits present in healthcare organizations of all sizes.

Healthcare decision-makers are shown how to conduct an in-depth analysis of their organization’s information risk level. After this assessment is complete, the book offers specific measures for lowering the risk of a data breach, taking into account federal and state regulations governing the use of patient data. Finally, the book outlines the steps necessary when an organization experiences a data breach, even when it has taken all the right precautions.

• Written for physicians, nurses, healthcare executives, and business associates who need to safeguard patient health information
• Shows how to put in place the information security measures needed to reduce the threat of data breach
• Teaches physicians that run small practices how to protect their patient’s data
• Demonstrates to decision-makers of large and small healthcare organizations the urgency of investing in cybersecurity

People responsible for patient information security in hospitals, medical practices of all sizes, pharmacies, third party vendors, and any other health organizations. InfoSec practitioners working in the healthcare industry

Preface, by John Halamka, MD, Harvard Medical School

Chapter 1: Introduction: Dissecting a book title

Chapter 2: Healthcare IT Security: Perception Versus Reality

Chapter 3: Regulations Governing Protected Health Information

Chapter 4: Risk Assessment

Chapter 5: Reducing the Risk of a Data Breach

Chapter 6: Mobile device security

Chapter 7: Securing Medical Devices

Chapter 8: Educating Medical and Administrative Staff for Information Security

Chapter 9: Managing Business Associates

Chapter 10: Coping with a Data Breach