| | April 20168UTLOOK Healthcare Tech OpinionIn myAs recently as twelve years ago, security in healthcare was a far cry from what we know today. For many Chief Information Officers, security strategy wasn't a top-of-mind conversation and drilling down to specifics was rare. It certainly wasn't a priority that reached the boardroom. Security concerns were largely physical and administrative, hinging on paper-based records that could be carelessly exposed. Healthcare security teams have evolved into dynamic teams charged with staying ahead of today's threats. This evolution is propelled by highly targeted application development and emerging healthcare technologies. We also responded to the industry-changing Health Insurance Portability and Accountability Act (HIPAA) of 1996 and the fallout from Hurricane Katrina in 2005, a disaster which displaced around 4,00,000 people and illuminated the inability for patients and providers to exchange health information.One element of security that remains unchanged is how human behavior can put health information at risk. Today's biggest threat is social engineering, which relies less on technical skill, and more on the practical understanding of human behavior. It requires interaction with the end user and bets on our inability to detect threats in what looks like an everyday email.At Piedmont Healthcare, a nonprofit health system made up of six hospitals and a network of com-munity physicians, the top concern is patient safety and experience. So when we decided to launch our own phishing expedition, we hoped to not only identify areas of improvement within our organi-zation, but to illustrate the reality of cyber-attacks as a high-level priority.Since 2013, thieves stole nearly $750 million from more than 7,000 companies in the U.S. using email Overcoming the Timeless Risk of Human BehaviorBy Geoff Brown, CIO, Piedmont Healthcare
< Page 7 | Page 9 >