Risk
1/24/2012
03:49 PM
Connect Directly
RSS
E-Mail
50%
50%
Repost This

7 Tools To Tighten Healthcare Data Security

Most of the largest healthcare data security and privacy breaches have involved lost or stolen mobile computing devices. Consider these tools and tips for protecting patient data and managing breaches.
Previous
2 of 7
Next


ID Experts' Radar is a Web-based HITECH incident risk assessment, documentation, and reporting tool that standardizes the process of analyzing, documenting, and reporting privacy-related events in compliance with the HITECH Act.

Radar provides a central repository for all incident-related information and management reporting, including accessing HIPAA-related incidents to determine when notifications are needed or if they need to be reported to the U.S. Department of Health and Human Services.

The product collects and manages supporting data for HHS Office for Civil Rights investigations and is scalable for any size organization.

Shown here is a Radar HITECH risk assessment for a lost thumb drive storage device containing patient information.

Recommended Reading

Patient Data Losses Jump 32%

How Secure Are Your Clinicians' Mobile Devices?

80% Of Doctors Use Mobile Devices At Work

Healthcare CIOs Juggle More Mobile Challenges

Docs Warm Up to EHRs, Patients Want Paper

Stanford Hospital Breach Exposes 20,000 ER Records

App Allows Radiology Diagnosis Via Tablet, Smartphone

Why Can't Patients See Their EHR Data?

Docs Have iPad Fever: Is There A Cure?

9 Mobile Health Apps Worth A Closer Look

Previous
2 of 7
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-5704
Published: 2014-04-15
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

CVE-2013-5705
Published: 2014-04-15
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.

CVE-2014-0341
Published: 2014-04-15
Multiple cross-site scripting (XSS) vulnerabilities in PivotX before 2.3.9 allow remote authenticated users to inject arbitrary web script or HTML via the title field to (1) templates_internal/pages.tpl, (2) templates_internal/home.tpl, or (3) templates_internal/entries.tpl; (4) an event field to ob...

CVE-2014-0342
Published: 2014-04-15
Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) .php or (2) .php# extension, and then accessing it via unspecified vectors.

CVE-2014-0348
Published: 2014-04-15
The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding...

Best of the Web