Register for this Class   Bring Course On-Site

2-Day Course
Maximizing e-Healthcare Information Security

---

With an advancing national spotlight on electronic medical records and e-healthcare initiatives, much is changing and will change, in legislation and practice. Security is one of the biggest concerns in this evolving technology. Those professionals involved directly and indirectly with any healthcare/medical record, patient, billing or related medical history, security is the key! In this program, you’ll review current U.S. privacy regulations, as well as the potential regulatory requirements on the horizon. You’ll learn how they affect your healthcare organization and what changes you need to have planned for the future.

Participants will enjoy thorough case studies, true examples of what went right and what went wrong for other organizations. Students examine security trends and solutions, identify common methods of attack, and ultimately how to securely manage medical data. You’ll know where to look for vulnerabilities and how to handle both internal and external breaches, and develop a clean security plan to make certain your records are secure. Whether run by the IT department, information management or the healthcare professional, security will be the key component to acceptance and success of any successful e-healthcare conversion.

 

---

Course Outline

I. Historical overview of security and privacy issues

• Statistics data
• Case studies
• Primary IT threats
• Protecting the integrity and confidentiality of health care information
• Healthcare IT terminology
• Understanding malware, network sniffing and direct attacks
• Increased EHR and IT vulnerabilities

2. Legal and regulatory components of HIT

• State-specific and government health data issues
• Red Flag Rules of identity theft
• ISO, NIST, SOX and HIPAA requirements
• HITECH Act of 2009
• Proposed regulations from the Dept. of Health & Human Services (DHHS)

3. Evaluating your enterprise vulnerabilities – How do we measure up?

• Internal and external threats
• Hardware and software vulnerabilities
• Patient and employee privacy
• Wireless and blue tooth issues
• HIPAA compliant risk analysis

4. Developing a comprehensive enterprise security and compliance plan

• Security & privacy best practices
• Security and privacy policies and standards
• Security issues with an integrated system
• Provider and staff education
• Secure application design and architecture
• Roles and responsibilities of an enterprise security & privacy team
• EHR system audit reporting

5. Provider and staff security education

• Common security awareness models
• Task analysis and productivity studies
• Securing your equipment and record keeping
• Consent Documents, Agreements, and Disclosures
• Complying with Patient Information Requirements
• Developing a enterprise wide security awareness program

---

Who should attend

• Healthcare Practice Administrators
• HIS Managers & IT Business Analysts
• Healthcare Project Managers
• Healthcare CIOs
• Practice IT Managers
• Clinical Directors
• Business Office Managers
• IPA Directors
• Compliance and privacy officers
• Risk managers
• Medical Records Personnel
• Financial and accounting personnel
• Healthcare billing services