Implementing Information Security in Healthcare: Building a Security Program

✍ Scribed by Herzig, Terrell W(Editor);Walsh, Tom(Editor);Gallagher, Lisa A(Editor)

• Publisher: Healthcare Information and Management Systems Society (HIMSS)
• Year: 2013
• Tongue: English
• Leaves: 313
• Category: Library

✦ Synopsis

Implementing Information Security in Healthcare: Building a Security Program offers a critical and comprehensive look at healthcare security concerns in an era of powerful computer technology, increased mobility, and complex regulations designed to protect personal information. Featuring perspectives from more than two dozen security experts, Implementing Information Security in Healthcare: Building a Security Program explores the tools and policies healthcare organizations need to build an effective and compliant security program. Topics include information security frameworks, risk analysis, senior management oversight and involvement, regulations, security policy development, access control, network security, encryption, mobile device management, disaster recovery, and more. Information security is a concept that has never been more important to healthcare as it is today. This book offers stakeholders key guidance in fostering information security while striving toward improved patient care.

✦ Table of Contents

Cover......Page 1
Title Page......Page 2
Copyright Page......Page 3
About the Editors......Page 4
About the Contributors......Page 6
Table of Contents......Page 12
Acknowledgements......Page 14
A Tribute to Terrell W. Herzig......Page 16
Chapter 1: The Importance of Information Security in Healthcare......Page 20
Chapter 2: Information Security Frameworks......Page 26
Chapter 3: Information Security Planning......Page 38
Chapter 4: Risk Analysis......Page 46
Chapter 5: Senior Management Oversight and Involvement......Page 64
Chapter 6: Information Security Regulations......Page 74
Chapter 7: Security Policy Development......Page 84
Chapter 8: The Concept of Security Controls......Page 90
Chapter 9: Access Control......Page 94
Chapter 10: Network Security......Page 110
Chapter 11: Use of Encryption......Page 128
Chapter 12: Managing Mobile Devices......Page 142
Chapter 13: Application Security......Page 160
Chapter 14: Information Security Operations......Page 170
Chapter 15: Security Considerations in Technology Contracting......Page 182
Chapter 16: Business Continuity and Disaster Recovery......Page 202
Chapter 17: Change Control and Change Management......Page 222
Chapter 18: Testing Your Technical Controls......Page 234
Chapter 19: Auditing Your Program......Page 248
Chapter 20: Incident Handling......Page 268
Chapter 21: Information Systems Implementation......Page 286
Appendix A......Page 296
Appendix B......Page 302
Index......Page 304