hospinfosec.com
Hospital Information Security: The problem with ID badges
http://www.hospinfosec.com/2014/08/the-problem-with-id-badges.html
A practical look at Information Security in the hospital environment. Monday, August 18, 2014. The problem with ID badges. Think about it. What are ID badges? Quite simply, they provide basic individual identification. With them, we are granted access to whatever areas have been approved for that badge. We assume that means we are granting access to an individual, but unless we authenticate the individual's identity (i.e. PIN or biometrics), access is actually grated to the bearer of the badge. So, while...
hospinfosec.com
Hospital Information Security: August 2014
http://www.hospinfosec.com/2014_08_01_archive.html
A practical look at Information Security in the hospital environment. Monday, August 18, 2014. The problem with ID badges. Think about it. What are ID badges? Quite simply, they provide basic individual identification. With them, we are granted access to whatever areas have been approved for that badge. We assume that means we are granting access to an individual, but unless we authenticate the individual's identity (i.e. PIN or biometrics), access is actually grated to the bearer of the badge. So, while...
hospinfosec.com
Hospital Information Security: July 2014
http://www.hospinfosec.com/2014_07_01_archive.html
A practical look at Information Security in the hospital environment. Thursday, July 31, 2014. USB devices turned bad. Today there are articles popping up about the inherent security flaws in USB devices. If you haven't read about it yet, this is a good one: Evil USB Devices. There seems to be some misunderstanding about how all this works and what it means for the rest of us. In an effort to make this as clear and concise as possible, let me summarize:. 4) The host OS doesn't know or care what the actua...
hospinfosec.com
Hospital Information Security: USB devices turned bad
http://www.hospinfosec.com/2014/07/today-there-are-articles-popping-up.html
A practical look at Information Security in the hospital environment. Thursday, July 31, 2014. USB devices turned bad. Today there are articles popping up about the inherent security flaws in USB devices. If you haven't read about it yet, this is a good one: Evil USB Devices. There seems to be some misunderstanding about how all this works and what it means for the rest of us. In an effort to make this as clear and concise as possible, let me summarize:. 4) The host OS doesn't know or care what the actua...
hospinfosec.com
Hospital Information Security: About the Author
http://www.hospinfosec.com/p/about-author.html
A practical look at Information Security in the hospital environment. Don has proven his expertise in numerous areas of hospital security, including:. Policy and procedure development to meet mission objectives and comply with state and federal regulations (such as HIPAA). Perform security risk analysis and work with hospital leadership and medical staff to address risks identified. Perform vulnerability assessments on networks and systems and work with technical staff to develop a mitigation strategy.
hospinfosec.com
Hospital Information Security: Obstacles to Healthcare Information Security
http://www.hospinfosec.com/2014/07/obstacles-to-healthcare-information.html
A practical look at Information Security in the hospital environment. Tuesday, July 22, 2014. Obstacles to Healthcare Information Security. Recently, someone posted a question in the Healthcare Information Security group on LinkedIn. The question was:. Through your experience, what do you see as the most significant obstacles to information security in the healthcare environment? I thought the discussion, and my response, might be of interest here . . . In a word . . . HIPAA. Please share your thoughts!
hospinfosec.com
Hospital Information Security: Oh no! I lost my thumb drive . . .
http://www.hospinfosec.com/2012/06/oh-no-i-lost-my-thumb-drive.html
A practical look at Information Security in the hospital environment. Tuesday, June 19, 2012. I lost my thumb drive . . . This can be a scary scenario, especially if you work in a hospital! If you store patient information on removable media, which includes thumb drives, you are going to have to follow the breach notification rules if you lose one . . . unless it's encrypted! What about enterprise management? What operating systems do your drives need to work with? For example, BitLocker. Are you comfort...
hospinfosec.com
Hospital Information Security: June 2012
http://www.hospinfosec.com/2012_06_01_archive.html
A practical look at Information Security in the hospital environment. Tuesday, June 19, 2012. I lost my thumb drive . . . This can be a scary scenario, especially if you work in a hospital! If you store patient information on removable media, which includes thumb drives, you are going to have to follow the breach notification rules if you lose one . . . unless it's encrypted! What about enterprise management? What operating systems do your drives need to work with? For example, BitLocker. Are you comfort...
