Protecting Patient Information in Outsourced Telehealth Services: Bolting on Security When it Cannot be Baked in

Protecting Patient Information in Outsourced Telehealth Services: Bolting on Security When it Cannot be Baked in

Patricia Y. Logan, Debra Noles
ISBN13: 9781616920005|ISBN10: 1616920009|ISBN13 Softcover: 9781616923709|EISBN13: 9781616920012
DOI: 10.4018/978-1-61692-000-5.ch005
Cite Chapter Cite Chapter

MLA

Logan, Patricia Y., and Debra Noles. "Protecting Patient Information in Outsourced Telehealth Services: Bolting on Security When it Cannot be Baked in." Pervasive Information Security and Privacy Developments: Trends and Advancements, edited by Hamid Nemati, IGI Global, 2011, pp. 61-76. https://doi.org/10.4018/978-1-61692-000-5.ch005

APA

Logan, P. Y. & Noles, D. (2011). Protecting Patient Information in Outsourced Telehealth Services: Bolting on Security When it Cannot be Baked in. In H. Nemati (Ed.), Pervasive Information Security and Privacy Developments: Trends and Advancements (pp. 61-76). IGI Global. https://doi.org/10.4018/978-1-61692-000-5.ch005

Chicago

Logan, Patricia Y., and Debra Noles. "Protecting Patient Information in Outsourced Telehealth Services: Bolting on Security When it Cannot be Baked in." In Pervasive Information Security and Privacy Developments: Trends and Advancements, edited by Hamid Nemati, 61-76. Hershey, PA: IGI Global, 2011. https://doi.org/10.4018/978-1-61692-000-5.ch005

Export Reference

Mendeley
Favorite

Abstract

Hospitals have increasingly employed outsourcing to lower the cost of healthcare delivery and improve efficiency and quality, thereby, enabling more focus on core competencies of patient care, teaching, and research. Outsourcing presents a challenge for protecting patient information when new services are implemented or integrated into an existing healthcare information system. Enabling new outsourced telehealth services often requires “bolting on” security to legacy systems rather than “baking” it into the system. This chapter addresses security practices necessary for healthcare organizations implementing new telehealth services as part of an outsourced relationship. While a number of recommendations are available for security readiness assessments pursuant to HIPAA compliance, none directly addresses the challenge of implementing security for outsourced clinical services. A case study is presented for a recent implementation of teleradiology services within a large regional hospital. Using the case, system vulnerabilities are demonstrated and relevant best practices to mitigate exposing patient information are discussed.

Request Access

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.