Nearly all respondents said their organizations actively work to determine the cause and origin of security breaches. But only half have a plan for responding to threats or incidents related to security breaches, the study said.
Nearly all respondents said their organizations share patient data electronically, mostly with state government entities. Organizations are also likely to share data in the future with Health Information Exchanges and Regional Health Information Organizations (two types of organizations for disseminating e-health records, mandated by ARRA).
A little less than half of these organizations, 41%, "indicated that these sharing arrangements have resulted in the use of additional security controls beyond those that were already in place at their organizations. This is consistent with the data reported in the 2008 survey," HIMSS said.
E-mail encryption and single sign-on were the security technologies not present in organizations that were most likely to be installed in the future, according to the report.
For Further Reading:
Blue Cross of Northeast Pennsylvania, the University of Louisville School of Medicine, and a range of large and small healthcare providers are using mobile apps to improve care and help patients manage their health. Find out how. Download the report here (registration required).br