5.4 Compliance and Prevention
The HHS has set forth a guideline for preventing cyber threats and protecting PHI known as the Health Industry Cyber Security Practices.
The guideline has two volumes for cyber security guidelines and best practices. One is for clinics and smaller organizations, and the second is for medium to large health organizations.
The guideline includes the following practices:
- Asset management
- Email protection systems
- Network management
- Endpoint protection systems
- Cyber security policies
- Incident response
- Vulnerability management
- Data protection and loss prevention
- Medical device security.