Design and Implementation: Security Focal Points
Pulse October 28, 2021
Security will only be as good as the design and implementation behind it. Acknowledging those realities is important to help ensure that security is actually built into systems and that data are actually protected. However, what is behind those concepts? That is where the nuance will arise.
Focusing on design and implementation was brought to the fore from a recent research report about security connected to Fast Interoperability and Resources (FHIR) APIs. The report (of which this description is a gross oversimplification) found flaws in the way that FHIR was incorporated into applications designed to encourage or promote the flow of data. The issues are not a flaw or failure of FHIR, but the way in which it is incorporated...