[{"innerBlocks":[],"name":"core\/freeform","postId":3703,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"The Department of Health and Human Services requires that HIPAA-covered entities such as providers and payers conduct a privacy and security risk assessment and, based on the findings, implement appropriate safeguards for protected health information.

There is just one problem: \u201cHIPAA doesn\u2019t offer prescriptive information on how to do the assessment,\u201d says Roy Mellinger, chief information security officer at insurer Anthem Inc.

Also See:<\/b> EHNAC, HITRUST ease security certification processes<\/a>

Unlike the finance and energy industries where certain protections are set in stone, among others, healthcare has a wide level of security maturation\u2014some safeguards will be different among healthcare entities.

However, many health care entities, particularly smaller organizations, may not have the expertise to understand the controls they need to implement.

That\u2019s why HITRUST, a consortium of stakeholders collaborating to better secure protected health information, has created the HITRUST Threat Catalogue to collect the cyber threats out in the industry and pull them together into a catalogue that can be shared across providers and payers.

The idea, Mellinger explains, is to identify the threats and tie them to prescriptive actions on how to mitigate the threats. Different sectors in the Threat Catalogue cover unintentional actions and intentional actions such as fraud, sabotage, hacking and denial of service attacks. The catalogue, he adds, \u201cis almost a packaged program.\u201d

Also See:<\/b> 13 top paying cloud and security jobs for 2017<\/a>

The catalogue lists the threats and risks by category and types of risk, along with a description of each risk.

These risks then are cross-referenced and mapped to specific controls, or mitigation recommendations, within HITRUST\u2019s Common Security Framework, also known as CSF, a network platform that supports numerous HITRUST programs.

The initial Threat Catalogue, coming out in March, is available for free; stakeholders do not have to be HITRUST members to use it. More information is available here<\/a>.
","saveContent":"The Department of Health and Human Services requires that HIPAA-covered entities such as providers and payers conduct a privacy and security risk assessment and, based on the findings, implement appropriate safeguards for protected health information.

There is just one problem: \u201cHIPAA doesn\u2019t offer prescriptive information on how to do the assessment,\u201d says Roy Mellinger, chief information security officer at insurer Anthem Inc.

Also See:<\/b> EHNAC, HITRUST ease security certification processes<\/a>

Unlike the finance and energy industries where certain protections are set in stone, among others, healthcare has a wide level of security maturation\u2014some safeguards will be different among healthcare entities.

However, many health care entities, particularly smaller organizations, may not have the expertise to understand the controls they need to implement.

That\u2019s why HITRUST, a consortium of stakeholders collaborating to better secure protected health information, has created the HITRUST Threat Catalogue to collect the cyber threats out in the industry and pull them together into a catalogue that can be shared across providers and payers.

The idea, Mellinger explains, is to identify the threats and tie them to prescriptive actions on how to mitigate the threats. Different sectors in the Threat Catalogue cover unintentional actions and intentional actions such as fraud, sabotage, hacking and denial of service attacks. The catalogue, he adds, \u201cis almost a packaged program.\u201d

Also See:<\/b> 13 top paying cloud and security jobs for 2017<\/a>

The catalogue lists the threats and risks by category and types of risk, along with a description of each risk.

These risks then are cross-referenced and mapped to specific controls, or mitigation recommendations, within HITRUST\u2019s Common Security Framework, also known as CSF, a network platform that supports numerous HITRUST programs.

The initial Threat Catalogue, coming out in March, is available for free; stakeholders do not have to be HITRUST members to use it. More information is available here<\/a>.
","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

New service helps identify and mitigate cyber threats

More for you