隐私和安全参与以降低风险.pdf

1、Ill Be There For You:August 15,2024Privacy and Security Engagement to Reduce RiskKaren Habercoss,MBA,MSWChief Privacy OfficerThe University of Chicago Medicine&Biological Sciences2Karen.Habercossuchicagomedicine.orgDISCLAIMER:The views and opinions expressed in this presentation are mine and do not

2、necessarily represent the official policy or position of my employer.Michael W.DeGraff,CISSPDirector,Enterprise Information SecurityThe Joint Commission3mdegraffjointcommission.orgDISCLAIMER:The views and opinions expressed in this presentation are mine and do not necessarily represent the official

3、policy or position of my employer.Healthcare&Public Health Sector Coordinating Councils(HSCC)Cybersecurity Working Group Healthcare is designated as“critical infrastructure”along with other industry sectors and are represented by industry organized sector coordinating councils.HSCC is an industry le

4、d advisory council with organizations from direct patient care;pharmaceuticals,labs and blood banks;medical technology;plans and payers;digital health,health I.T.and includes government agencies as part of a joint cybersecurity working group.Mission to identify systemic cybersecurity threats to crit

5、ical healthcare infrastructure and collaborate toward guidance and policies for mitigating those risks,and promote threat preparedness and incident response activities.Organized into task groups that develop best-practices available to stakeholders and the public.4Expectations Patients and healthcar

6、e consumers trust and expect that:Their confidential and sensitive data is being acquired,used,and disclosed in accordance with applicable laws,regulations,and best practice standards;They can exercise certain transparent rights and control over the availability,accessibility,and interoperability of