Question

As discussed in health care management, the health care industry continues to face challenges and patients are becoming more aware of patient rights with access to health care provider information. 1. Specify what you believe to be the greatest challenge that the health care industry faces today. Provide a rationale for your response. 2. Then, go to Strategic Plan FY 2018–2022 from the U.S. Department of Health & Human Services (HHS). Has the HHS strategically planned to address the challenge that you identified? 3. Locate a health care organization that is positioned to address the challenge that you identified. How has—or how can—this organization address the challenge you described?

Answer 1

challenge- Cyber security

As need for storing Medical information of patient is increasing day by day so database , softwares are used for this purpose. It has brought revolutionary advance in healthcare information technology but has certain drawback. As all the information is on database or internet the hackers have easy access to information and health care breaches occurs. Information is used by hackers for their personal purpose. And private information of patients is sold illegally.

This issue is mentioned in plan fy 2018-2022 by hhs . Hhs has NIST (NATIONAL INSTITUTE OF STANDARD AND TECHNOLOGY) to development of framework for cyber security

Strategy

1- evaluation of cyber security posture of high value assets and ensure their proper protection

2- evalute governance mechanism to identify threat and manage it

3- evolve risk management techniques

4- continuously improve and enforce proper training for hhs employee who access hhs information

CITAD- CYBER SECURITY and information technology audit division

It is a part of OAS( OFFICE OF AUDIT SERVICE) is a group of IT auditors focused on providing audit to information it works in collaboration with HHS. They have deep technical knowledge in cybersecurity.

They perform audits , IT risk assessment test, vulnerability scanning tools, cloud computing to monitor cybersecurity.