Healthcare IT News July 25, 2022
The draft publication 800-66 focuses on helping inform the industry about security issues around electronic protected health information.
The National Institute of Standards and Technology announced an update to its healthcare cybersecurity guidance, placing a greater emphasis on the guidance’s risk management component, including integrating enterprise risk management concepts.
WHY IT MATTERS
The draft publication 800-66 focuses on helping inform the industry about security issues around electronic protected health information, or ePHI, which runs the gamut of patient data from lab results to hospital visits within the context of the HIPAA Security Rule.
The HIPAA Security Rule, which focuses on protecting the confidentiality, integrity and availability of ePHI, is separated into six main sections, ranging from general rules and administrative safeguards...