The first step that should be taken when implementing an HIE, is a
risk analysis. Any possible security threats should be identified and
monitored. When a threat was identified, a designated person or
team should have been assigned to mitigate all risks. Another
possible step that could be taken to prevent a breach from occurring
is limiting the access of information to just 1 person or a small team
of people. By limiting access, the range of threats will be limited to a
small group of sources. Encryption efforts will not be as costly and
more effective.
Effective privacy and security strategies lead to organizational
success by providing safeguards for the patients and providers, and
assure protection of their personal information. It gives some control
to the patients over how this information is shared and where it
might be transferred to. With the strategies set in place, it also
ensures that they will be followed by establishing consequences for
intentional breaches.
The NEHEN network threat cause a violation of HIPAA rights, The
Privacy Rule, and The Security Rule.
