Recommendation for additional healthcare security policies for states
| The policy issue | State health policies have not evolved as fast as the methods of hacking/IT incidents, and they do not address novel hacking methods specifically |
| What new policies are required? | Policies address specific novel hacking techniques (e.g. business email compromise, phishing, ransomware) |
| How can new policies address the issue? | Policies can address four facets of requirements for covered entities: |
| Deterrence: Prepare and increase security educational training programs covering novel hacking techniques | |
| Prevention: Implement and enforce policies with a punishment system for hacking incidents, such as those already in place for theft or unauthorized disclosure | |
| Detection: Implement particular safeguards based on the type of IT incidents/hacking methods | |
| Recovery: Create specific guidelines for post-breach actions based on the type of incident | |
| Based on Socioeconomic Factors, which states must prioritize enacting new policies? | States with higher populations and numbers of covered entities and employees. Wealthier states must prioritize devising statewide anti-hacking policies in their healthcare sector |
| The policy issue | State health policies have not evolved as fast as the methods of hacking/IT incidents, and they do not address novel hacking methods |
| What new policies are required? | Policies address specific novel hacking techniques (e.g. business email compromise, phishing, ransomware) |
| How can new policies address the issue? | Policies can address four facets of requirements for covered entities: |
| Based on Socioeconomic Factors, which states must prioritize enacting new policies? | States with higher populations and numbers of covered entities and employees. Wealthier states must prioritize devising statewide anti-hacking policies in their healthcare sector |
Source(s): Table by authors
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.