Healthcare organizations and their business partners are required to invest in the security systems and processes that will ensure the integrity of their patients' private data. The challenge for healthcare organizations is to provide adequate protection, at reasonable cost, without compromising the convenience or performance of their professional services. Several requirements need to be addressed, including:
- Ensuring that patient records are stored and transmitted in an encrypted form
- Ensuring that the healthcare organization's internal IT systems cannot be easily compromised by network intruders
- Ensuring that any potential compromises of the IT infrastructure can be completely documented and reported