Prevention VS. Response

In today’s world of high-speed-everything, it is easy to understand why compliance takes a back seat to more pressing concerns like maintaining a profitable facility. But let’s face it, regulators are not going away and neither are the thieves who are waiting to pounce on your patient and employee data. The best approach is to implement a program before an incident occurs, which includes a plan for handling corrective actions.

We can change the “Culture of Security” within your organization.

IDTSOA provides a complete prevention solution to include:

• Physical Risk Assessment
• Appointment of an incident response officer (IRO)
• Creation of a Data Breach Prevention Policy BANK (DBPP)
• Onsite Employee Training and documentation
• Installation of an employee id theft solution
• Notification to all Third-Party Business Associates (BA)
• Creation of a Data Breach Response Task Force
• Implementation of a Post Breach Response Plan

The latest round of privacy regulations were intended to wakeup healthcare organizations, and get them to take a hard look at their data protection practices. Even in small rural towns, hospitals are often one of the largest employers within the community. “In many cases we have made the problem much more complex than it really needs to be,” says Barbara Dingman, Chief Privacy Officer for a large medical center in Odessa, Texas. “Sometimes it’s as simple as communicating the issue to your employees in an uncomplicated, relatable way.”