DoD Health Information Security Regulation (DoD 8580. 02-R)

DoD Health Information Security Regulation (DoD 8580. 02-R)
Author: Department Defense
Publisher: CreateSpace
Total Pages: 38
Release: 2013-01-27
Genre:
ISBN: 9781482095364

This Regulation is issued under the authority of DoD Directive 5136.1 (Reference (a)). It assigns the Assistant Secretary of Defense for Health Affairs (ASD(HA)) the authority, direction, and control to establish policies, procedures, and standards that shall govern DoD medical programs. Although this Regulation is based on the requirements of the Health Insurance Portability and Accountability Act (HIPAA) of 1996, Public Law 104-191 (1996) (Reference (b)), and title 45 Code of Federal Regulations parts 160, 162, and 164 (Reference (c)), it covers much of the same ground as the Federal Information Security Management Act (FISMA) (Reference (d)). This Regulation in no way impacts the need for the Department of Defense to comply with the FISMA. This law has not been superseded and has been taken into consideration in developing this Regulation. This Regulation applies to the Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the Department of Defense.

DoD Health Information Security Regulation

DoD Health Information Security Regulation
Author: Assistant Secretary of Defense for Health Affairs
Publisher:
Total Pages: 38
Release: 2013-01-13
Genre: Reference
ISBN: 9781481974387

This Regulation is issued under the authority of DoD Directive 5136.1 (Reference (a)). It assigns the Assistant Secretary of Defense for Health Affairs (ASD(HA)) the authority, direction, and control to establish policies, procedures, and standards that shall govern DoD medical programs. Although this Regulation is based on the requirements of the Health Insurance Portability and Accountability Act (HIPAA) of 1996, Public Law 104-191 (1996) (Reference (b)), and title 45 Code of Federal Regulations parts 160, 162, and 164 (Reference (c)), it covers much of the same ground as the Federal Information Security Management Act (FISMA) (Reference (d)). This Regulation in no way impacts the need for the Department of Defense to comply with the FISMA. This law has not been superseded and has been taken into consideration in developing this Regulation. This Regulation applies to the Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the Department of Defense (hereafter referred to collectively as the "DoD Components").

DoD Health Information Privacy Regulation (DoD 6025. 18-R)

DoD Health Information Privacy Regulation (DoD 6025. 18-R)
Author: Department of Defense
Publisher: Createspace Independent Pub
Total Pages: 118
Release: 2013-01-12
Genre: History
ISBN: 9781481966504

This Regulation, “DoD Health Information Privacy Regulation,” is issued under the authority of DoD Directive 6025.18, “Privacy of Individually Identifiable Health Information in DoD Health Care Programs,” December 19, 2002 (reference (a)). It prescribes the uses and disclosures of protected health information. This Regulation is based on the requirements of the Health Insurance Portability and Accountability Act, Public Law 104-191 (reference (b)). Although it covers much of the same ground as the Privacy Act of 1974 (reference (c)), this Regulation in no way impacts the need for the Department of Defense to comply with reference (c) which has been implemented within DoD by DoD 5400.11-R (reference (d)). This Regulation applies to the Office of the Secretary of Defense, the Military Departments, the Chairman of the Joint Chiefs of Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the Department of Defense.

Information Security Program Regulation

Information Security Program Regulation
Author: DIANE Publishing Company
Publisher: DIANE Publishing
Total Pages: 170
Release: 1994-03
Genre: Computers
ISBN: 9780941375856

Sets forth regulations for the entire U.S. Defense Dept. relating to the protection and disclosure of national security information.

Healthcare Information Privacy and Security

Healthcare Information Privacy and Security
Author: Bernard Peter Robichau
Publisher: Apress
Total Pages: 179
Release: 2014-06-23
Genre: Computers
ISBN: 1430266775

Healthcare IT is the growth industry right now, and the need for guidance in regard to privacy and security is huge. Why? With new federal incentives and penalties tied to the HITECH Act, HIPAA, and the implementation of Electronic Health Record (EHR) systems, medical practices and healthcare systems are implementing new software at breakneck speed. Yet privacy and security considerations are often an afterthought, putting healthcare organizations at risk of fines and damage to their reputations. Healthcare Information Privacy and Security: Regulatory Compliance and Data Security in the Age of Electronic Health Records outlines the new regulatory regime, and it also provides IT professionals with the processes and protocols, standards, and governance tools they need to maintain a secure and legal environment for data and records. It’s a concrete resource that will help you understand the issues affecting the law and regulatory compliance, privacy, and security in the enterprise. As healthcare IT security expert Bernard Peter Robichau II shows, the success of a privacy and security initiative lies not just in proper planning but also in identifying who will own the implementation and maintain technologies and processes. From executive sponsors to system analysts and administrators, a properly designed security program requires that that the right people are assigned to the right tasks and have the tools they need. Robichau explains how to design and implement that program with an eye toward long-term success. Putting processes and systems in place is, of course, only the start. Robichau also shows how to manage your security program and maintain operational support including ongoing maintenance and policy updates. (Because regulations never sleep!) This book will help you devise solutions that include: Identity and access management systems Proper application design Physical and environmental safeguards Systemwide and client-based security configurations Safeguards for patient data Training and auditing procedures Governance and policy administration Healthcare Information Privacy and Security is the definitive guide to help you through the process of maintaining privacy and security in the healthcare industry. It will help you keep health information safe, and it will help keep your organization—whether local clinic or major hospital system—on the right side of the law.

Patient Privacy, Consent, and Identity Management in Health Information Exchange

Patient Privacy, Consent, and Identity Management in Health Information Exchange
Author: Susan D. Hosek
Publisher: Rand Corporation
Total Pages: 101
Release: 2013-05-17
Genre: Medical
ISBN: 083307797X

As a step toward improving its health information technology (IT) interoperability, the Military Health System is seeking to develop a research roadmap to better coordinate health IT research efforts, address IT capability gaps, and reduce programmatic risk for its enterprise projects. This report identifies gaps in research, policy, and practice involving patient privacy, consent, and identity management that need to be addressed to improve the quality and efficiency of care through health information exchange.

Information Security

Information Security
Author: Matthew Scholl
Publisher: DIANE Publishing
Total Pages: 117
Release: 2009-09
Genre: Computers
ISBN: 1437914950

Some fed. agencies, in addition to being subject to the Fed. Information Security Mgmt. Act of 2002, are also subject to similar requirements of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule. The HIPAA Security Rule specifically focuses on the safeguarding of electronic protected health information (EPHI). The EPHI that a covered entity creates, receives, maintains, or transmits must be protected against reasonably anticipated threats, hazards, and impermissible uses and/or disclosures. This publication discusses security considerations and resources that may provide value when implementing the requirements of the HIPAA Security Rule. Illustrations.