Privacy & Security (301)

Chad Peterson, managing director at NetSPI, talks about HIPAA's "unwritten requirement" – how pentesting can help HIT understand environments and protect vulnerabilities.

Raza Beg, cybersecurity lead at the Defense Health Agency, discusses his Certified Professional in Healthcare Information and Management Systems (CPHIMS) certification, his career trajectory and how other professionals view the credentials.

Dr. Eric Liederman, director of medical informatics for The Permanente Medical Group, talks about how the policies he suggested after a pre-HIPAA workplace data breach won back patient trust and spurred his interest in cybersecurity.

Michelle Ramim, assistant professor of health informatics at Nova Southeastern University, talks about the need for stronger security for health data from wearable and implantable medical devices.

R David Moon, chairman and founder of Arx Nimbus, talks about the need for healthcare organizations to go from a reactive cybersecurity stance oriented around point solutions to developing comprehensive strategies to mitigate risk.

Accessible cybersecurity information helps cross-functional teams improve business continuity planning, which can mitigate impacts after an attack, says Gerry Blass, CEO of ComplyAssistant and Frank Sinatra, CISO at Newark's University Hospital.

Tim Dawson, CTO of engineering at Canon Medical, talks about medical imaging for at-home care, as well as the significance of data neutrality and standardized structures for structured and unstructured patient data.

Cybersecurity is a top concern for the HHS Office for Civil Rights, says Director Melanie Rainer, who describes how her office is helping providers understand and meet their security requirements.

Lee Kim, senior principal of cybersecurity and privacy at HIMSS, reveals key findings from the 2022 healthcare cybersecurity study, including a decline in ransomware attacks and continuing workforce challenges.

Interconnectivity inside and outside the four walls of a hospital means health systems must evolve from one-time transaction risk assessments, says Intermountain Healthcare VP and CISO Erik Decker in a preview of his HIMSS23 session.

John Menefee of Travelers Bond and Specialty Insurance, talks about optimizing risk tolerance, what cyber carriers are looking for and how they are getting better at helping to protect healthcare organizations.

At HIMSS23, Monique Mansoura, executive director of global health security & biotechnology at MITRE, will lead a discussion on using real-world data to respond to emerging health threats.