Questions tagged [healthcare]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
50 views

HIPAA Compliance: Employees/Contractors accessing patient health info from another country?

We are a digital health tech startup dealing with mental health. Our tech team is remote (South America & Asia) and our operations are in Australia & US. I haven't been able to understand ...
7
votes
1answer
215 views

Healthcare company uses keyloggers for security purposes. Is this normal?

I just attended a recruitment session for a major healthcare provider in the United States. The presenter, a high-ranking member of one of their IT divisions (not security specifically) mentioned that ...
2
votes
1answer
145 views

UK healthcare encryption obligations

I'll soon be working on upgrading a system which contains a MYSQL server and redis server on AWS It works by querying two entire tables decrypting all of the contents and then putting the result in ...
1
vote
1answer
2k views

Can I send a Medical Record Number (MRN) via email internally? [closed]

We use Office 365, which might make a difference. Can I (legally) send an MRN, with no other demographic or health information, from me@mycompany.com to coworker@mycompany.com?
2
votes
1answer
116 views

Shared floor space, cameras and HIPAA compliance

I am a compliance associate at my company, which is a small call center. My problem is that two of our clients will have to share floor space. One client is tech support for high-end action cameras, ...
6
votes
2answers
191 views

What issues exist in generating a signed, paper-based PGP message stored by a hostile organisation?

I have recently been the victim of having my medical record tampered with by the organisation holding it. Under state law I have a legal right to submit information to be included in my medical record,...
0
votes
1answer
80 views

Securing Macbooks in an Enterprise Environment [closed]

I have been looking online at different forums/websites but was not able to find a direct answer. Does a checklist/process or software exist to secure Macbook computers in a enterprise environment( ...
3
votes
1answer
51 views

Solution for Enterprise SW Eng. with Github and NPM [closed]

Can anyone share an architecture or framework that supports the use of Open Source software in enterprise software development environments? I'm seeking solutions to manage and mitigate the risk of ...
3
votes
2answers
2k views

Anthem Leak - How do I find out if I'm affected?

Recently, Anthem (A health insurance company somehow associated with Blue Cross Blue Shield and potentially other insurance providers that I am unaware of) was the victim of a large data breach. I've ...
21
votes
4answers
1k views

Protecting Health Care Database

I am doing a minor project on information security in which i am implementing techniques listed below to protect a HEALTH CARE database. Preventing SQL Injection (using prepared statements,validating,...
36
votes
6answers
3k views

What are the purposes of these security policies?

I work at an IBM lab and there are some security policies that I do not understand the point of. When I ask why we do them my boss simply says it's policy and avoids answering the question. We must ...
12
votes
5answers
2k views

what would be a good way for a doctor to send xrays encrypted to another doctor?

As a dentist, I often want to send medical information including digital xrays to another doctor. What would be a good/easy way to do this encrypted? Our organization currently requires that all ...
4
votes
1answer
2k views

Encrypt Medicare card numer in C# in ASP.NET

I am giving a free consultation for a non profit organisation that wants a simple system to manage multiple groups with a schedule component, etc. and also manage the medical informations of the kids. ...
7
votes
3answers
61 views

Active measures against lost or stolen PDAs in healthcare?

Many physicians, nurses, and technical staff like to carry PDAs to be kept abreast of patient conditions. Various companies want caretakers to view ECGs on their iPads. Due to the incredibly private ...
13
votes
5answers
836 views

What is the risk of giving USB drives as promotional items by a healthcare provider

There have been a couple of instances where malware infected USB drives have been given away unknowingly as promotional items at conferences, e.g., IBM in 2010. Besides this, if a healthcare company ...
13
votes
2answers
3k views

Best practices for implementation of role-based access control in healthcare applications

Amongst the open source EMRs, which ones may be good to learn from? Any references I can go to as a starting point?
21
votes
9answers
14k views

In Healthcare IT, is a “break glass” mode to bypass access controls commonly required?

I've seen referenced in literature the need to have a "break glass" mode in Healthcare IT applications. In this mode, the access controls in an application can be bypassed for an emergency when it is ...