<?xml version="1.0"?>
<rss version="2.0">
   <channel>
      <title>Electronic Security, Privacy, and Confidentiality by </title>
      <link>https://padlet.com/tammyrader60/mo5jugolimu5</link>
      <description>NUR 353- Team 3: Tamara Rader, Gilberto Mendoza, Sandra Vinson, Yaritza Roman</description>
      <language>en-us</language>
      <pubDate>2019-09-25 19:10:27 UTC</pubDate>
      <lastBuildDate>2025-12-28 03:39:43 UTC</lastBuildDate>
      <webMaster>hello@padlet.com</webMaster>
      <image>
         <url></url>
      </image>
      <item>
         <title>Securing Network Information</title>
         <author>tammyrader60</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/388891653</link>
         <description><![CDATA[<div> Physical, technical and administrative safeguards are in place to protect the privacy, security and integrity of recorded patient information, while at the same time allowing appropriate access to health providers for the care and management of patients. Physical safeguards include device isolation, allowing direct physical access only to authorized personnel; data backup and maintaining copies, emergency contingency protocols, and proper device disposal. Technical safeguards include firewalls and secure transmission modes for communication such as <a href="https://www.radiologyinfo.org/en/glossary/glossary.cfm?gid=802">virtual private networks</a> (VPN) or <a href="https://www.radiologyinfo.org/en/glossary/glossary.cfm?gid=801">secure sockets layer</a> (SSL), and <a href="https://www.radiologyinfo.org/en/glossary/glossary.cfm?gid=790">encryption</a> techniques. </div>]]></description>
         <enclosure url="https://www.radiologyinfo.org/en/info.cfm?pg=article-patient-privacy" />
         <pubDate>2019-09-24 14:55:58 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/388891653</guid>
      </item>
      <item>
         <title>Keeping Your Electronic Health Information Secure</title>
         <author>tammyrader60</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/388893786</link>
         <description><![CDATA[<div>Most of us feel that our health information is private and should be protected. The federal government put in place the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule to ensure you have rights over your own health information, no matter what form it is in. The government also created the HIPAA Security Rule to require specific protections to safeguard your electronic health information. A few possible measures that can be built in to EHR systems may include: “Access control” tools like passwords and PIN numbers, to help limit access to your information to authorized individuals. “Encrypting” your stored information. That means your health information cannot be read or un­derstood except by those using a system that can “decrypt” it with a “key.” An “audit trail” feature, which records who accessed your information, what changes were made and when. •••Finally, federal law requires doctors, hospitals, and other health care providers to notify you of a “breach.” The law also requires the health care provider to notify the Secretary of Health and Human Services. If a breach affects more than 500 residents of a state or jurisdiction, the health care provider must also notify prominent media outlets serving the state or jurisdiction. This requirement helps patients know if something has gone wrong with the protection of their information and helps keep providers accountable for EHR protection. </div>]]></description>
         <enclosure url="https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/understanding/consumers/privacy-security-electronic-records.pdf" />
         <pubDate>2019-09-24 14:58:21 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/388893786</guid>
      </item>
      <item>
         <title>Security Tools</title>
         <author>tammyrader60</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/388896525</link>
         <description><![CDATA[<ul><li><a href="https://www.softwareadvice.com/resources/ehr-security-measures/#onc">ONC-ATCB Certification</a></li><li><a href="https://www.softwareadvice.com/resources/ehr-security-measures/#audit">Audit Trails</a></li><li><a href="https://www.softwareadvice.com/resources/ehr-security-measures/#password">Password Protection</a></li><li><a href="https://www.softwareadvice.com/resources/ehr-security-measures/#data">Data Encryption</a></li></ul><div><br></div>]]></description>
         <enclosure url="https://www.softwareadvice.com/resources/ehr-security-measures/" />
         <pubDate>2019-09-24 15:01:43 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/388896525</guid>
      </item>
      <item>
         <title>Identity Authentication: Guidance and Risk Analysis</title>
         <author>gmendoz</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389195934</link>
         <description><![CDATA[<div>Summary of Identity Authentication the document covers identity authentication primarily in the section on tokens but other sections are also relevant. There are three factors as the cornerstone of identity authentication: Something you know (for example, a password) Something you have (for example, an ID badge or a cryptographic key) Something you are (for example, a fingerprint or other bio-metric data) Multi-factor authentication refers to the use of more than one of the factors listed above, which requires to reach a high level of confidence in authentication. At least one of the factors must contain a secret that is securely presented to the electronic process that is verifying the user’s identity. A second factor can be used to protect or activate the first, so that a bio-metric such as a fingerprint can be incorporated in this way.</div>]]></description>
         <enclosure url="https://www.himss.org/sites/himssorg/files/Patient_Portal_Identity_Proofing_and_Authentication_Final.pdf" />
         <pubDate>2019-09-25 01:27:19 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389195934</guid>
      </item>
      <item>
         <title>What is an Appropriate Level of Authentication for Online Patient Access to Health Information?</title>
         <author>gmendoz</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389196807</link>
         <description><![CDATA[<div>When a patient first gets set up with a login for a healthcare application, like a patient portal or healthcare mobile app, there is a belief among some that this initial access setup needs to happen in person. While this is an option, it’s not a requirement. A simpler, alternative option is for a patient to provide an email address either in person or by phone for where the registration invitation will be sent. This is a step up from most setup authentications on the web, where the email address is entered into a registration form. Patients could also register autonomously, also referred to as self-registration, by asking the patient challenge questions produced by a 3rd party such as IDology.</div><div><br></div><div>While these two options are less secure than in-person authentication, these options may be preferred for convenience purposes. By simplifying the process for gaining access to the patient portal, a provider can boost portal use to gain benefits such as improved patient engagement, more efficient appointment scheduling and cancellations, and enhanced treatment plan adherence. The main takeaway is to<a href="https://www.law.cornell.edu/cfr/text/45/164.312"><strong> </strong>set up procedures that verify</a> that the person requesting access to ePHI is who he or she claims to be.<br><br></div><div>At Bridge Patient Portal, one of the most common complaints made by healthcare organizations using other patient portals, typically bundled with their EHR vendor, is the cumbersome process patients must go through to register.<br><br></div>]]></description>
         <enclosure url="https://www.bridgepatientportal.com/2017/06/12/hipaa-healthcare-applications-need-know-user-authentication-part-1/" />
         <pubDate>2019-09-25 01:30:09 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389196807</guid>
      </item>
      <item>
         <title></title>
         <author>gmendoz</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389199625</link>
         <description><![CDATA[]]></description>
         <enclosure url="https://youtu.be/CgIqWpNK5fo" />
         <pubDate>2019-09-25 01:39:54 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389199625</guid>
      </item>
      <item>
         <title>Nurses are key tools in protecting patients&#39; healthcare security.</title>
         <author>tammyrader60</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389727863</link>
         <description><![CDATA[<div>-What is your role as a nurse in protecting patient healthcare information?<br><br>-Do you think patient confidentiality is compromised with the Electronic Health Record?<br><br>- In your opinion, are patient portals or electronic health records (EHR) secure? <br><br><br></div>]]></description>
         <enclosure url="https://padlet-uploads.storage.googleapis.com/401516028/ef22bca20237ca3fc06b5d9222e30b52/Capture.jpg" />
         <pubDate>2019-09-25 20:14:20 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389727863</guid>
      </item>
      <item>
         <title></title>
         <author>tammyrader60</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389732636</link>
         <description><![CDATA[]]></description>
         <enclosure url="https://www.medscape.org/viewarticle/821650_2" />
         <pubDate>2019-09-25 20:26:56 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/389732636</guid>
      </item>
      <item>
         <title>Medical Device Cyber Security</title>
         <author>tammyrader60</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391067280</link>
         <description><![CDATA[<div>Managing threats and cost</div>]]></description>
         <enclosure url="https://newsroom.vizientinc.com/video/medical-device-cybersecurity-managing-risks-and-costs" />
         <pubDate>2019-09-29 19:36:44 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391067280</guid>
      </item>
      <item>
         <title></title>
         <author>sandyrn03</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391090743</link>
         <description><![CDATA[<div>Portable devices in healthcare can include IPAD’s, smart phones and laptops. These devices allow quick access to a patient’s health information (PHI). With the use of portable devices Physicians and other healthcare providers can manage and expedite decisions in treatment for their patients. This convenient accessibility comes with great risk. Data Breaches have become one of healthcare’s largest liabilities. </div><div>Major risk with portable devices include lost or stolen device, downloading viruses, unsecured internet/malware and allowing others to use your device. The State Attorney General and HIPPA are monitoring and prosecuting for HIPPA violations. These breaches can cost a healthcare entity into the millions depending on the severity of the breach. Now that hospitals are adopting the Bring your Own Device (BYOB) policy it is imperative for them to protect every patient’s EHR. </div>]]></description>
         <enclosure url="" />
         <pubDate>2019-09-29 22:21:10 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391090743</guid>
      </item>
      <item>
         <title></title>
         <author>sandyrn03</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391091166</link>
         <description><![CDATA[]]></description>
         <enclosure url="https://kaysharbor.com/blog/healthcare/8-mobile-device-benefits-in-healthcare" />
         <pubDate>2019-09-29 22:24:33 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391091166</guid>
      </item>
      <item>
         <title></title>
         <author>sandyrn03</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391091277</link>
         <description><![CDATA[]]></description>
         <enclosure url="https://www.hipaajournal.com/mobile-data-security-and-hipaa-compliance/" />
         <pubDate>2019-09-29 22:25:35 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391091277</guid>
      </item>
      <item>
         <title></title>
         <author>sandyrn03</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391093113</link>
         <description><![CDATA[]]></description>
         <enclosure url="https://padlet-uploads.storage.googleapis.com/408679274/8341f2e1e3f8b5fc49e5f58ddff879e0/2607E906_F46C_4E03_8B6D_126A64320AD3.jpeg" />
         <pubDate>2019-09-29 22:42:00 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391093113</guid>
      </item>
      <item>
         <title></title>
         <author>sandyrn03</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391093874</link>
         <description><![CDATA[]]></description>
         <enclosure url="https://padlet-uploads.storage.googleapis.com/408679274/a0190eb246b86ecfc0180d4ca22fd2c9/405B742B_88BC_4D67_9F62_0CBCD9134935.jpeg" />
         <pubDate>2019-09-29 22:48:09 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391093874</guid>
      </item>
      <item>
         <title></title>
         <author>yaritzarn</author>
         <link>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391139130</link>
         <description><![CDATA[<div>Threats to data security in healthcare organizations are becoming a widespread problem.  According to a nationwide survey by the Computing Technology Industry Association (CompTIA) human error is responsible for more than half of the security breaches.  Examples are carelessness and lack of website experience.  The negligent insider is the most common source of a security breach, this includes lost or stolen devices or simply walking away from a work computer without logging off.  <br>Proper workspace security discipline is crucial in maintaining security.  Employees need to be trained to be aware of computer monitor visibility, shoulder surfing and policies regarding the removal of computer hardware.<br>The most common security threats in corporations are hackers, malicious code and malicious insiders.<br>A new threat to healthcare organizations is ransomware, malicious code that blocks the organization from using their computer systems until a ransom is paid to the hacker.  Another huge threat to corporate security is social engineering, for example, someone attempting to access a network might pretend to be an employee from IT office and asks for your ID and password. The outsider can then gain access to the corporate network.  </div>]]></description>
         <enclosure url="https://image.slidesharecdn.com/threatstoinformationsecurity-140110032406-phpapp02/95/threats-to-information-security-4-638.jpg?cb=1389324313" />
         <pubDate>2019-09-30 03:43:39 UTC</pubDate>
         <guid>https://padlet.com/tammyrader60/mo5jugolimu5/wish/391139130</guid>
      </item>
   </channel>
</rss>
