BC Advantage - 2017 Issue 3
Ransomware
Subscribe or sign in to view the full article.
Article Overview
This article covers ransomware in the context of healthcare privacy and security compliance. It explains how ransomware is recognized at a high level, why it is treated as a security incident under the HIPAA Security Rule, and what general response, containment, recovery, and post-incident activities may be involved. The piece also references federal agencies and incident-handling guidance sources that organizations may consult. It is intended for covered entities, business associates, and personnel involved in security, compliance, and incident response.
Why This Topic Matters
Ransomware can disrupt access to systems and may create HIPAA security and privacy concerns. Understanding the article helps healthcare organizations recognize when an event may require incident response, deeper analysis, and possible breach assessment.
Article Sections
-
What is ransomware?
Introduces ransomware as a type of malicious software and describes it in broad cybersecurity terms.
-
How to detect if your computer systems are infected with ransomware?
Summarizes general indicators that may suggest a ransomware-related incident and notes the role of security monitoring and training.
-
What to do if your computer systems are infected with ransomware?
Outlines the broad phases of security incident response, including analysis, containment, recovery, and post-incident review.
What You Will Learn
- How ransomware is generally characterized in a healthcare security context
- What kinds of warning signs may suggest a ransomware-related incident
- How HIPAA frames ransomware as a security incident
- What broad incident response activities are discussed for affected organizations
- Why post-incident analysis and breach assessment may be relevant
- Which external resources and organizations are mentioned for additional guidance
Who Should Read This
- Covered entities
- Business associates
- HIPAA compliance staff
- Healthcare IT and security personnel
- Incident response teams
Subscribe or sign in to view the full article.
Quick, Current, Complete - www.findacode.com