X
GO
Resource Overview

Health Centers are made up of many different levels of IT Security & Privacy expertise, both in terms of staff skills and organizational maturity. Resources are needed that help guide both beginners and more advanced staff and leadership to understanding how to best manage security and privacy risk management at their health center.

The overall objective is to create a privacy & security workbook tailored specifically to Health Centers that will provide them with implementable strategies for increasing their risk management skills including sections focused on:

  • Security Risk Pre-Assessment
  • Assessment of Security Risk 
  • Security Risk Mitigation
  • Ongoing Security Risk Management
Health IT Privacy & Security Skill Sets
Strategic Cybersecurity Breach Protection and Incident Response
HITEQ Center
/ Categories: Privacy and Security, Privacy & Security Best Practices, HIPAA, Security Risk Analysis, Breach Mitigation & Response

Strategic Cybersecurity Breach Protection and Incident Response

Guidance and Resources for Health Centers

General cybersecurity guidance would suggest that Health IT breach should not be considered a matter of “if”, but rather a matter of “when”. How an organization prepares and responds to an episode of breach is just as important as defending itself from breach. Unfortunately, Health Centers are perceived as a domain with high potential for data breach, and consequently it is critical for Health Center leadership to embrace breach mitigation and incident response planning across their entire organization vs being a matter to be addressed by their Health IT team. Breach can occur through both internal and external network leaks, through malware such as ransomware and through physical means on site. This is Part 2 of the Health Center Defense Against the Dark Web presentation series. This presentation provides general knowledge about breach mitigation and planning strategies for incident response.

Access the presention, as well as several other helpful references and resources below!

Documents to download

Resource Links

  • NIST Computer Security Incident Handling GuideComputer security incident response has become an important component of information technology (IT) programs. Because performing incident response effectively is a complex undertaking, establishing a successful incident response capability requires substantial planning and resources. This publication assists organizations in establishing computer security incident response capabilities and handling incidents efficiently and effectively.
  • ......Health Center Defender Against the Dark Web
Print
26929
Tags: HIPAA NIST cybersecurity secure messaging passwords password policy authentication security measures cybersecurity defender
Intended AudienceHealth Center IT Leadership, All Health Center Staff, Health IT Staff, Privacy & Security Staff

Related Resources

Leave a comment

This form collects your name, email, IP address and content so that we can keep track of the comments placed on the website. For more info check our Privacy Policy and Terms Of Use where you will get more info on where, how and why we store your data.
Add comment

Acknowledgements

This resource collection was cultivated and developed by the HITEQ team with valuable suggestions and contributions from HITEQ Project collaborators.

Quick Feedback Request
Learning Progress
Highlighted Resources & Events
Need Assistance?
Would you like more assistance regarding Privacy and Security strategies or support in using any of the included resource sets?

  Request Support

 

Upcoming Events
The Quadruple Aim
Quadruple Aim

A Conceptual Framework

Improving the U.S. health care system requires four aims: improving the experience of care, improving the health of populations, reducing per capita costs and improving care team well-being. HITEQ Center resources seek to provide content and direction aligned with the goals of the Quadruple Aim

Learn More