Multiple locations and access points present a security challenge. Confidential PHI can be found through the healthcare environment — on laptops, clinical workstations, USB drives, networks, clinical applications, patient portals, and mobile devices, with access taking place inside and outside the corporate firewall. As the quantity of data, users and access points increases, so does the number of security breaches.
The increasing media visibility of PHI device thefts, unencrypted data loss, unauthorized access and poor internal security controls is driving governments, regulators and citizens to demand that healthcare organizations implement security that is capable of protecting confidential information.
-
According to the 19th Annual HIMSS Leadership Survey, nearly one out of four healthcare organizations reported a security breach in the last year. In addition, 97% of healthcare CIOs have expressed concerned about data security — and rightfully so. High-profile breaches are occurring almost daily and on a global scale:
- Utah, U.S. The theft of a healthcare organization's backup tape put the personal health data for 2.2 million patients at risk.
- Nevada, U.S. Unauthorized access to a database at a regional medical center exposed the personal information of 128,000 patients.
- U.K. A national health trust loses the details on 168,000 patients, most of which were children, after a computer disk was lost.
- U.S. Healthcare records of more than 386,000 patients were stolen from unsecured laptops, disks and tapes. A $100k fine was posed on the organization for being in violation of HIPAA regulations.
The fact that it was even possible to breach these networks points to an inherent flaw in the security paradigm deployed by most healthcare organizations. Perimeter security and firewalls are no longer enough to prevent network intrusions. It's time for a different approach that offers self-defending data from the inside of the network out, and truly unbreakable encryption that goes far beyond the Advanced Encryption Standard (AES) 256 standard, which clearly is capable of being broken.
Absolute-ID offers a family of products with unbreakable encryption that proactively defends data.
Absolute-ID's RocITSafe is a hardware agnostic mobile computing platform with a zero-footprint. It's the only solution that protects data on the network from the inside out, making the data self-defending and undetectable.
The RocITSafe product family, RocITStor and RocITCrypt provides a standardized method to secure information no matter where that data resides since the data actually protects itself.
RocITStor is the newest generation of unified data protection solutions for both data-at-rest and data-in-flight, providing users with a secure way to store, manage and share collaboratively with workflow partners and/or secure communities of common interest.
RocITCrypt is a centrally managed security service that provides the enterprise with the ability to provision and manage a variety of different credentials.
