At least one-half of U.S. health care organizations have experienced a data breach, one-third in the last 3 years. As the footprint of health care expands from the hospital and doctor's office to the home, cyber-threats and ransomware breaches add to the risk-exposure across the health/care ecosystem. Those risks will only grow in our future health care scenarios. In today's Health Populi blog, we re-convene the third of three parts of my cybersecurity-and-healthcare conversation with Richard Kaufmann, CISO of Amedisys, rounding out our wide-ranging discussion by looking at the futures of cyber-sec in health care and how we can best manage the risks...attending to the patient at the center of care, everywhere. To set our stage for context, I connect some dots from several relevant studies including: - Software Advice's 2024 Healthcare Data Security Survey - Deloitte's look into the future of #cybersec in healthcare - The World Economic Forum's vision for cybersecurity in the community's social fabric, and, - Greg Garcia's observations on cybersec in health care and #publichealth. Thanks to Microsoft's George Jones and Stacey Heinonen for matching me up with Richard for this important conversation. I learned so much from Richard's experience and wisdom and empathetic approach to the patients he and his organization ultimately serve. cc David Reppond Deven McGraw David Harlow Matthew Fisher Office of the National Coordinator for Health Information Technology (ONC) HIMSS HLTH American Hospital Association Healthcare Financial Management Association (HFMA) AHIMA Ponemon Institute #UXhealth #healthdesign #healthsecurity #healthdata #privacy #security #cybersecurity #healthsecurity #homecare #palliativecare #infosec #trust #healthconsumers #ptexp https://lnkd.in/eP9xFieD
David Harlow
1mo
The broad principles of data liquidity across the health care ecosystem carry a cost, including exposure to the risk of breach. Over the years, some have questioned the broad availability of an individual’s PHI to many individuals across many covered entities and business associates for the broadly defined purposes of treatment, payment and health care operations, suggesting that a more surgical approach to access and sharing, to data minimization, might go a long way towards improving data privacy without limiting the workings of the health care system for the benefit of patients.
Michael Skaff
1mo
This is the challenge - with greater access to healthcare services and data comes greater risk.
Grace Vinton
1mo
THIS
Health Care and Med Tech Innovation // Compliance & Privacy Leader // Advisor
1moMoney quote: “Mistakes are going to happen. The security organizations that excel are the ones who can limit the ramifications of mistakes the most. My advice to the CISOs out there wrestling with the question above, would be to focus on how your organization wants to work and design your security controls accordingly. Operations is like water – it’s always going to find the easiest and fastest path. For our security team at Amedisys, that looked like spending lots of cycles meeting with our clinicians and learning how they wanted to work. Then we strategically placed friction points where it made sense – mostly as just a check point in their daily routines.”