HITRUST Analysis Deems Healthcare “Reactive” to Cybersecurity | Healthcare Informatics Magazine | Health IT | Information Technology Skip to content Skip to navigation

HITRUST Analysis Deems Healthcare “Reactive” to Cybersecurity

March 6, 2015
by Gabriel Perna
| Reprints

The Health Information Trust Alliance (HITRUST), a Frisco, Texas-based industry group working to establish a common security framework (CSF), analyzed how healthcare organizations tackle data security against cyber threats and risks, and found most were reactionary in their approach.

HITRUST’s three-month review of cyber risk management strategies for the healthcare industry revealed what many have already come to know: When it comes to data security from hackers, healthcare organizations are ill prepared. This is not exactly a startling finding, with a major hack of health insurer Anthem having just happened one month ago. Another report, from Redspin Inc., a Carpinteria, Calif.-based health IT security consultant, found that more than half of the breaches of protected health information reported to the Department of Health and Human Services (HHS) Office of Civil Rights (OCR) were the result of hacking, including the notable incident at Community Health System that affected 4.5 million patients. 

One element of this lack of preparation is the fact that most organizations aren’t able to understand the effectiveness of deployed information security products, especially in relation to emerging cyber threats. They also acknowledged they had minimal understanding of the impact of emerging cyber threats on their products and applications.

“Although we have made good progress in maturing our cyber risk management approach for industry, with significant improvements in information sharing, the real opportunity is to understand the emerging threats and model them against organization-specific defenses, configurations and applications,” Daniel Nutkis, chief executive officer, HITRUST, said in a statement.

HITRUST is rolling out a new strategy, a situational awareness and threat assessment tool, which will aim to help healthcare organizations increase visibility against emerging threats and how that could affect their current products. The organization partnered with NSS Labs, an Austin, Texas-based security research and advisory company, on the tool.



Dignity Health, CHI Merging to Form New Catholic Health System

Catholic Health Initiatives (CHI), based in Englewood, Colorado, and San Francisco-based Dignity Health officially announced they are merging and have signed a definitive agreement to combine ministries and create a new, nonprofit Catholic health system.

HHS Announces Winning Solutions in Opioid Code-a-Thon

The U.S. Department of Health and Human Services (HHS) hosted this week a first-of-its-kind two-day Code-a-Thon to use data and technology to develop new solutions to address the opioid epidemic.

In GAO Report, More Concern over VA VistA Modernization Project

A recent Government Accountability Office (GAO) report is calling into question the more than $1 billion that has been spent to modernize the Department of Veterans Affairs' (VA) health IT system.

Lawmakers Introduce Legislation Aimed at Improving Medicare ACO Program

U.S. Representatives Peter Welch (D-VT) and Rep. Diane Black (R-TN) have introduced H.R. 4580, the ACO Improvement Act of 2017 that makes changes to the Medicare accountable care organization (ACO) program.

Humana Develops Medication Management Tool

A new tool developed by Humana enables the company’s members to keep a list of their medications in one place.

Four Hospitals Piloting OurNotes Initiative in 2018

Beginning in January, four academic hospitals—Beth Israel Deaconess Medical Center in Boston, University of Washington in Seattle, Dartmouth-Hitchcock Medical Center in Lebanon, New Hampshire and University of Colorado in Boulder—will begin piloting a new digital tool called OurNotes that enables patients to contribute to their clinical notes.