Healthcare Security

List live aspects that should be addressed in a healthcare security assessment. 

International Association for Healthcare Security and Safety (lAHSS)... 

Modeling and simulation of biometric data are emerging technologies for educational and training purposes (public safety and healthcare, security access, and forensic systems). To model data for the study of patient s biometrics, as well as for training purposes, simulated, or synthetic, biometric data can be used. 

How does a healthcare security function impact the well-being of nurses ... 

But although pervasive healthcare, as it is sometimes called, promises to deliver huge benehts, there are still numerous challenges to be resolved. For a start, information about the health of patients is very sensitive, so any system that handles such data must be completely secure. It must also be unobtrusive and easy to use, because the vast majority of patients will not be technophiles eager to adopt the latest technology. 

Every year, Americans use over one billion sharp objects to administer healthcare in their homes. These sharp objects include lancets, needles, and syringes. If not disposed of in puncture-resistant containers, they can injure sanitation workers. Sharp objects should be disposed of in hard plastic or metal containers with secure lids. The containers should be clearly marked and be puncture resistant. 

Gardner E. Secure passwords and audit trails, sidebar. Mod Healthcare 33, Nov. 3, 1989. 

No matter what industry in which you are employed, it s possible to pinpoint average salaries paid by employers for specific jobs. One of the best resources for gathering current and accurate salary information (available online or in printed form) is the Salary Wizard from www.Salary.com, which allows you to search—free—average salary informahon by job title (and level), either by national average or specific to a parhcular U.S. city. The site provides a salary range (for base pay), the median salary, and additional information on a total compensahon package (which would include the dollar value of possible bonuses, benefits—including Social Security, 401 (k)/403(b), disability, healthcare, pension, and time off—and the net paycheck eshmate), as well as other useful information. 

The administration of access controls is usually passed to the outsourcing company. Access must be restricted to authorized users. Users may be from both the pharmaceutical or healthcare company and the outsourcing company. Access controls must protect iirformation from unauthorized modihcation (inadvertent or malicious). Extra controls may be required so that previously closed systems do not unwittingly become open systems. Security in general is discussed in Chapter 12. Open and closed systems are discussed in Chapter 15. 

The pharmaceutical and healthcare company should consider establishing a policy whereby personnel are to decline to comment on inspectors queries outside company premises. Indeed personnel should be required to notify site security who will mobilize an official company response to off-site queries. Only nonwork issues should be discussed out of work otherwise, personnel should say that the run of the conversation is inappropriate for discussing or chatting and should, if necessary, walk away. 

Direct access to electronic documentation and records should not be offered to the inspector/investigator. If direct access is requested by the inspector/investigator, the legal department should be informed. The inspector/investigator is not an employee of the company and would have to be properly approved, involving authorization, suitable training, and competency to have access. Such access could also violate the security (e.g., closed system status) of the company s computer systems. Similarly, inspectors/investigators should not be permitted to connect their own computer systems to pharmaceutical or healthcare companies systems. 

The ministries involved are the Ministries of Health, Social Security, Economy and Finance, and Industry. Under the supervision of the Ministry of Health (which is a member of the Economic Committee for Medicines) are the Medicines Agency, the Agency for Healthcare and Health Products, and the French Blood Establishment. 

Healthcare facilities need to expect that in case of a chemical event, many people are likely to self-evacuate and present to medical facilities. In order to maintain some control, it is recommended that all access and egress at treatment facilities be controlled and monitored to prevent contamination of noncon-taminated individuals and facility areas. It is helpful to have law enforcement involved to provide security and crowd control. 

Product is removed from the list of medicines reimbursed by French social security schemes. Advertising directed at healthcare professionals ... 

The aim of the IPHA code is to secure acceptance of high standards of conduct in the marketing of medicines. It emphasises the importance of providing healthcare professionals with accurate, fair and objective information about medicinal products, so that rational decisions can be made as to their use. 

International events Pharmaceutical companies should not organise or sponsor events for healthcare professionals (including sponsoring individuals to attend such events taking place outside their home country) unless it is appropriate and justified to do so from the logistical or security point of view. International scientific congresses and symposia that involve participants from many countries are therefore justified and permitted. 

Information available to healthcare professionals Promotional material must be accessible to healthcare professionals only via a secure system that is designed to prevent access by members of the general public. Companies must take all reasonable steps to ensure that these information sources are appropriate and will enhance the appropriate prescribing, dispensing and usage of medicines in Australia. Any promotional material provided to healthcare professionals via the internet must comply with the requirements for other promotional items. 

Internet There is no specific guidance on the use of the internet in Mexico but advertising on it is subject to the same rules as other advertising. COFEPRIS therefore requires pharmaceutical company advertising on the internet for prescription-only medicines to be restricted to healthcare professionals. Although no rules have been laid down for these levels of security, it is normally administered via the company granting user name and password protection. 

Achieving a balance between access and security is not simple. In a hospital, numerous individuals have a need to handle patient data too strict limits on access to data can harm patients by preventing healthcare workers from providing the best care. On the other hand, lax security leaves patients and the institution in danger of harm from unauthorized access to data. 

---