Implementing Information Security in Healthcare: Building a Security Program

Herzig, Terrell; Walsh, Tom

ISBN 10: 1938904346 / ISBN 13: 9781938904349

Published by HIMSS Publishing, 2013

About this Item

pp. 294.

Seller Inventory # 373344318

Bibliographic Details

• Title: Implementing Information Security in Healthcare: Building a Security Program
• Publisher: HIMSS Publishing
• Publication Date: 2013
• Language: English
• ISBN 10: 1938904346
• ISBN 13: 9781938904349
• Binding: Soft cover
• Condition: New

About this title

Synopsis

Implementing Information Security in Healthcare: Building a Security Program offers a critical and comprehensive look at healthcare security concerns in an era of powerful computer technology, increased mobility, and complex regulations designed to protect personal information. Featuring perspectives from more than two dozen security experts, the book explores the tools and policies healthcare organizations need to build an effective and compliant security program.

Topics include information security frameworks, risk analysis, senior management oversight and involvement, regulations, security policy development, access control, network security, encryption, mobile device management, disaster recovery, and more. Information security is a concept that has never been more important to healthcare as it is today. Special features include appendices outlining potential impacts of security objectives, technical security features by regulatory bodies (FISMA, HIPAA, PCI DSS and ISO 27000), common technical security features, and a sample risk rating chart.

About the Author

Terrell W. Herzig, MSHI, CISSP, was Information Security Officer of the University of Alabama at Birmingham (UAB) Health System, the UAB HIPAA Security Officer, and an adjunct professor of Health Informatics at the UAB. Mr. Herzig taught graduate courses in Information Engineering, Programming, Computer Networks, and Information Security in the UAB School of Health Professions. Tom Walsh, CISSP, has partnered with Brian Evans, CISSP, CISM, CISA, CGEIT, to assist healthcare organizations throughout the country with building regulatory compliant information security programs.