在HIPAA覆盖的实体中,哪些信息位置必须首先得到保护? 一种多标准决策方法
1Department of Information Technology and Supply Chain Management, College of Business and Economics, University of Wisconsin-Whitewater, Whitewater, Wisconsin, USA.
概括
符合HIPAA的实体必须优先保护基于数据驱动的风险评估的受保护健康信息 (PHI) 位置. 不同的医疗保健部门需要独特的安全策略,以有效地减轻网络威胁和数据泄露.
科学领域:
- 医疗信息学 医疗信息学
- 网络安全 网络安全
- 风险管理 风险管理
背景情况:
- 保护受保护的健康信息 (PHI) 对于健康保险可移植性和问责法案 (HIPAA) 的合规性至关重要.
- 越来越多的网络威胁和预算限制需要数据驱动的安全措施优先级.
研究的目的:
- 开发一个数据驱动的模型来对具有PHI泄露风险最高的地点进行排名.
- 为隐私官员提供量身定制的风险识别建议.
主要方法:
- 使用CORAS威胁建模和五种多标准决策方法.
- 采用统计方法进行一致性和可靠性检查.
主要成果:
- 按数据泄露风险排名物理和在线位置.
- 确定了医疗保健提供者 (网络服务器,便携式设备等),健康计划 (纸张/电影,网络服务器等) 和业务合作伙伴 (其他,网络服务器,便携式设备) 的明确优先级需求.
结论:
- 针对性风险减缓策略对于HIPAA覆盖的不同实体至关重要.
- 调查结果支持隐私官员识别和解决关键漏洞,以防止PHI泄露.
相关概念视频
Legal Guidelines for Documentation
1.3K
The legal guidelines for nursing documentation are essential for ensuring accurate, professional, and ethical recording of patient care. The guidelines are discussed here:
1.3K
Ethical Standards I
845
The American Nurses Association (ANA) created and implemented the first nationally accepted Code of Ethics for Nurses with Interpretive Statements. The Code of Ethics is a living document regularly updated by the ANA and establishes an ethical standard that is non-negotiable for nurses in all roles and settings.
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
845
Standards of Care II
678
Nurses bear specific legal responsibilities under several federal statutes, including:
678
Health Information Technology and Healthcare Information System
868
Health Information Technology (HIT)
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
868
Ethical Dilemmas II
1.1K
Resolving an ethical dilemma in healthcare involves a systematic approach that considers every aspect of the issue, respecting both the patient's needs and values and the healthcare professional's ethical obligations. Here are potential steps to resolve an ethical dilemma:
1.1K
Types of Reports II: Incident or Occurrence Report
860
An Incident or Occurrence Report in a healthcare setting is a crucial document used to record any unexpected occurrence that may or may not have affected a patient, employee, or visitor. Such reports are critical to improving patient safety and include all details leading up to and including the event.
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
860


