Electronic security, privacy, and confidentiality by Chelsea B., Nadiya C.

Three main areas of secure network information:

ncherba — 2023-10-13 21:19:03 UTC

Confidentiality
Availability
Integrity

Authentication of Users

ncherba — 2023-10-13 21:32:00 UTC

Organizations use authentication of employees in their security policies such as:

-Password

-Identification card

-Biometrics

Threats to Security

ncherba — 2023-10-13 21:35:07 UTC

A wide range of tools is available to an organization to protect the organizational network and information which include:

Antivirus technology: email scanning for malicious code, education of employees on never opening an email with an attachment, unless they are expecting one, automatic detection of spam mail.
Firewalls: serves as a electronic security guard at the gate of the corporate network. It allows only messages from known senders.
Data encryption

Off-site use of portable devices:

ncherba — 2023-10-13 21:37:41 UTC

Most common off-site use portable devices:

laptops
tablets
home computing systems
smartphones and smart devices
portable data storage devices

All can help to streamline the delivery of healthcare. However,

the agency is ultimately responsible for the integrity of the data contained on these devices.

Authentication

ncherba — 2023-10-13 21:43:25 UTC

Organizations need to protect information to ensure that only authorized individuals have access to the network and the data appropriate to their role.

ncherba — 2023-10-13 21:45:29 UTC

According to nationwide survey by the Computing Technology Industry Association, human error was identified as responsible for more than half of security breaches.

failure to follow policies and procedures
general carelessness
lack of experience with websites and applications
being unaware of new threats

Password

ncherba — 2023-10-15 00:06:21 UTC

Strong password policies include using combination of letters, numbers, and special characters, such as plus signs(+) and ampersands(&). Passwords should never be written down. Typically changed every 30 or 60 days.

ID Cards

ncherba — 2023-10-15 00:13:12 UTC

Can be magnetic, similar to a credit card, or have a radio-frequency identification (RFID) chip embedded into the card.

Biometrics

ncherba — 2023-10-15 00:44:18 UTC

Devices that recognize thumbprints or retina or patterns. Depending on the level of security needed, organizations commonly use a combination of these types of identification.

2023-10-15 17:32:01 UTC

Types of Security

2023-10-15 17:39:02 UTC

Document Management System (DMS) software and cloud storage utilize tools and methods to protect files.
-Document Redaction
Can obscure areas so people cannot read it
-Access Control Lists
Certain people have access to files
-File Encryption
Inaccessible to users without decryption key

Blockchain Technology

ncherba — 2023-10-16 20:06:20 UTC

-Data is organized in groups referred to as blocks.

-Each block can only hold a certain amount of data creating a data chain known as the blockchain.

-Each filled block is closed and added to the chain which creates a timeline that can't be tempered with.

-Blockchain ensures the validity and safety of the recorded data.

The most common security threats are:

ncherba — 2023-10-16 23:42:40 UTC

Hackers who are skilled at looking for and closing network security vulnerabilities.
Malicious codes that blocks the organization from using its computer systems until a ransom is paid.
Malicious insiders. This person can be a disgruntled or recently fires employee whose rights of access to the corporate network have not yet been removed.
Social engineering includes tactics, such as phishing, baiting with enticing offers, and distributing scareware, to manipulate users and compromise their online security.

ncherba — 2023-10-21 11:58:41 UTC

The healthcare system demands robust security and privacy measures. These safeguards are essential to shield sensitive data from cyberattacks, data breaches, identity theft, and unauthorized access, ensuring the confidentiality and integrity of patient information.

Confidentiality

ncherba — 2023-10-21 12:02:59 UTC

The confidentiality policy should clearly define which data are confidential and how those data should be handled. Employees also need to understand the procedures for releasing confidential information outside the organization and know which procedures to follow, if confidential information is accidentally or intentionally released without authorization.

Availability

ncherba — 2023-10-21 12:03:41 UTC

Refers to network information being accessible when needed. Policy should clearly define which activities are not acceptable and identify the consequences for violations.

Integrity

ncherba — 2023-10-21 12:04:21 UTC

Employees need to have confidence that the information they are reading is true. Organizations need clear policies that clarify how data are actually inputted, determine who has the authorization to change such data, and track how and when data are changed.

ncherba — 2023-10-21 12:15:59 UTC

ncherba — 2023-10-24 14:35:01 UTC

ncherba — 2023-10-24 16:16:26 UTC

In healthcare, concepts of electronic security, privacy, and confidentiality are critical to protecting patient data and ensuring trust in healthcare system.

Questions:

What are the challenges organizations face in maintaining these concepts and provide solutions or best practices?
How can healthcare organizations ensure they maintain patient trust and uphold ethical standards in handling electronic health records and sensitive data?
Share your own experiences with security, privacy, and confidentiality.

Portable Electronic Devices

2023-10-24 23:27:17 UTC

- Allow for better communication
- Ease of access to Electronic Health Records (EHR) or Hospital Information Systems (HIS)
- Informational resources such as textbooks, medical literature, drug references
- Clinical software apps

Summary

2023-10-24 23:33:16 UTC

The world of healthcare is adapting to technology and electronics. It has greatly increased the ease of care and access to care when implemented. With the growing technology, it is important to keep up-to-date with the changes especially when it comes to security, privacy, and confidentiality.

2023-10-24 23:37:49 UTC

Ventola, C. L. (2014). Mobile devices and apps for Health Care Professionals: Uses and benefits. National Institute of Health. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4029126/

2023-10-24 23:41:09 UTC

Record Nations. (2019). Different Types of Security in Records Management. YouTube. https://youtu.be/thZWJYyCqDQ?si=ivmlaoS7o9wTmgfp.

2023-10-25 00:00:45 UTC

McHugh, R. (2023, September 29). How to improve security of Records. Record Nations. https://www.recordnations.com/blog/different-types-security-in-records-management/

ncherba — 2023-10-27 13:46:14 UTC

American Nurses Association. (n.d.). Position Statement on Privacy and Confidentiality. Retrieved from https://nursejournal.org/resourses/nursing-code-of-ethics/

ncherba — 2023-10-27 13:47:15 UTC

Kampakis, S., Mourouzis, T., Cardoso G., Zinopoulou, M. (2022). Business Models in Emerging Technologies: Data Science, AI, and Blockchain. Business Expert Press, LLC. Retrieved from https://eds-p-ebscohost-com.ju.idm.oclc.org/eds/ebookviewer/ebook/bmxlYmtfXzMyOTQwMDFfX0FO0?sid=5d78fca1-575b-430b-9e81-f513db22a3fd@redis&vid=0&format=EB&rid=1

ncherba — 2023-10-27 13:48:31 UTC

McCombs School of Business. (2017). Integrity/Ethics Defined. [Video file]. Retrieved from https://www.youtube.com/watch?v=bD8Vc6Y6EIQ&t=10s

ncherba — 2023-10-27 13:49:27 UTC

McGonigle, D., Mastrian, K. (2021). Nursing Informatics and the Foundation of Knowledge. (5th ed.) Burlington, MA: Jones & Bartlett Learning.

ncherba — 2023-10-27 13:50:13 UTC

Office of the National Coordinator for Health IT. (2013). Worried about Using a Mobile Health Device for Work? Here’s What to Do! [Video file]. Retrieved from https://www.youtube.com/watch?v=Vz1ddGJn1PM&t=1s

ncherba — 2023-10-27 13:51:11 UTC

TechFrame. (2022). Biometric Technology Explained. [Video file]. Retrieved from https://www.youtube.com/watch?v=ED0mwYRj65A&t=11s

ncherba — 2023-10-27 13:51:52 UTC

U.S. Department of Health and Human Services. (n.d.). Summary of the HIPAA Privacy Rule. Retrieved from https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html

Patient Care

2023-10-29 13:30:05 UTC

- The main purpose of Electronic Health Records (EHR)/documentation is Patient Care.
- Medical documents can be scanned into the EHR.
- The EHR can be viewed simultaneously by multiple users
- Patient must give permission to release information (or as allowed by the law); the record is owned by the organization, but the information in the record is owned by the patient.
- It's "not just a collection of data that you are guarding—it’s a life” (Harman, Flite, and Bond, 2012)

Audits

2023-10-29 13:32:57 UTC

- With auditing, it can monitor who has accessed or who has access to the patient's record/information.
- Tracks all system activity with date and timestamps.
- Can even detail what was printed, if there were screenshots taken, and narrow down exact location of where the computer was that accessed the information.
- There are alerts to flag suspicious activity.

2023-10-29 13:41:47 UTC

Harman, L. B., Flite, C. A., & Bond, K. (2012). Electronic health records: Privacy, confidentiality, and security. Journal of Ethics | American Medical Association. https://journalofethics.ama-assn.org/article/electronic-health-records-privacy-confidentiality-and-security/2012-09