From the April 2016 issue of HealthCare Business News magazine
• Use multiple layers of protection.One or two layers of protection in today’s digital world are simply not enough. When considering a document protection solution, make sure it provides multiple layers of protection, beyond network level security (firewalls) and encryption at the database level. Consider implementing additional security layers that encrypt and protect each individual patient document regardless of where it happens to be — stored in a database, traveling via the Internet or saved on a patient’s own computer.
• Use cutting edge security technology.
Ensure that security tools, practices and controls are up to date. Self-audit and test controls regularly. Use automated tools such as vulnerability scanners and employ intrusion detection on both the network as well as internal systems. It is important to identify and stop potential attacks as soon as they begin, to protect patient data that resides in document storage systems.
• Provide ongoing employee education.The one point of failure that the best technology cannot protect against is the weak link in the chain — humans. If there isn’t enough training on what could happen, and on how to recognize and avoid being the point of failure, the easiest way for hackers to gain access is by compromising an employee’s access. Be sure that all employees understand and operate by the organization’s security and compliance measures. Security education should be ongoing and include providing the latest updates on potential threats and new trends. This training is also required in order to be HIPAA compliant. It is vital that health care organizations start to take even stronger measures to address the security gaps in their operations, including deploying tougher data protection solutions. The good news is there are new and innovative solutions in the marketplace that can help health care organizations to better fortify all of their digital documentation.
Mia Papanicolaou is chief operations officer for document security specialist Striata Inc. Papanicolaou joined Striata in 2006, and having worked in Africa and the U.K., now heads up North, Central and South American operations. Papanicolaou is a regular speaker on her areas of expertise — secure electronic document delivery and email marketing.Back to HCB News
