How To Include Cybersecurity In Your Privacy Impact Assessment
Keeping information safe and secure is a challenging development for businesses of all sizes over the last few years. Remote working and using cloud hosted services forced healthcare practices to change, or at least re-examine, their cybersecurity practices and protocols.
According to CyberEdge’s Cyberthreat Defense Report, 85% of organizations suffered from a successful cyberattack in 2021.
A privacy impact assessment (PIA) is an important tool to help understand the risks to patient health information and your healthcare business.
Does Your PIA Include Cybersecurity Risks and Mitigation Plan?
You should review your PIA regularly, at least annually, and update your risk mitigation plans when there is a change in your administrative, technical, or physical practices. You also need to consider that the threat environment external to your business, like the increasing risk of cybersecurity vulnerabilities, can damage your business.
In this Episode #107 of the Practice Management Nuggets Podcast, Jean L. Eaton, Practical Privacy Coach with Information Managers shows us how to include cybersecurity risks in your PIA.
#BeCyberSmart #PrivacyImpactAssessment #PIA #HIA #PHIPA
See all the show notes and links on our website!