Managing access to information in a healthcare environment is a challenging task. Access to patient files must be granted to authorized personnel, but no one else. Active Directory (AD)—which authenticates and authorizes users in a Windows network—profiles every user to ensure they fit the correct profile before being granted access to information. There cannot be…
Archive for: January, 2014
In a series of U.S. Dept. of Health & Human Services, Office of Inspector General (OIG) audits, it was found that some hospitals lack sufficient security features, potentially exposing patients’ electronic protected health information to unauthorized access. Vulnerabilities included unsecured wireless access, inadequate encryption, authentication failures, and other access control vulnerabilities. The importance of data…
Page 1 of 1