1 Journal One: Security Measures Department of Health, Southern New Hampshire University HCM-220: Healthcare Data Management Erica Wilson MHA/INF, MS, RHIA, CPC January 14th, 2024
2 Journal One: Security Measures I'll outline three or four security precautions that staff members in a healthcare setting ought to take in this journal entry. Subsequently, clarify my reasoning for selecting these specific tools, and highlight the significance of these security protocols that ensure the safety and security of data during usage. Finally, I will explain how giving employees role-based access would improve security. Security Measure Choices The security choices I chose for this journal entry are audit controls, mobile security, facility access controls, and device and media controls. Since technology is becoming increasingly used and favored within healthcare institutions I wanted to elaborate on a few of them and discuss the rationale of the importance of them. Security Measure Rationale Each of these choices help protect electronic health information and coincide with the privacy and security rules that healthcare institutions should follow. Audit controls holds individual users accountable for their actions by using an investigation tool to determine the root of the issue, its scope, and a solution for getting the system back up and running. It employs real- time monitoring to promptly detect security breaches, technical difficulties, and other issues. It also keeps an eye out for system intrusions so that they can be stopped before an incident happens. Mobile security is important in healthcare institutions because mobile devices can be easily lost, stolen, or misplaced. They come in a variety of shapes and sizes, such as tablets, smartphones, and thumb drives. They are employed in the medical field to help with information
3 system access and staff-patient communication. Those who work in health information management should restrict access using authentication techniques. Facility access controls restrict software and physical access to the data center to authorized information system personnel only. Policies and procedures need to include documentation on facility access controls. Card keys, access codes, and other control mechanisms can be used to manage access to the data center. An individual's membership in the healthcare facility does not give them permission to enter certain areas of the entire building and ensure proper safeguards. Device media controls are needed to then safeguard against loss and damage of computer hard drives, removable digital storage, CDs, optical disks, thumb drives, external hard drives, and CDs. Policies and procedures that regulate the movement and storage of electronic personal health information are required of media that store it. Importance of Data Security The use and security of data are becoming increasingly important as healthcare continues to look more deeply into technology and its many facets. When handwritten data is substituted with electronic health records to maintain the continuous flow of patient-related data, such as personal information, diagnosis, treatment, and follow-ups, data security becomes a major concern. (The Importance of Securing Healthcare Data for Patients, 2023) Role-Based Access The features and information that a user can access are