Paper: Secure Logging and Auditing in Electronic Health Records Systems: What Can We Learn from the Payment Card Industry

Secure Logging and Auditing in Electronic Health Records Systems: What Can We Learn from the Payment Card Industry

Abstract:

not available

Information:

Position paper by Jason King, Laurie Williams – HealthSec’12 – PDF Download

Brief Discussion:

I read this article because I wanted to see the differences between PCI (Payment Card Industry) and HIT (Health Information Technology)  in terms of logging requirements from an academic security perspective. The authors are quite right with their statement: “If cardholder data is breached in the PCI, payment card companies may then remove fraudulent charges from the customer’s account and/or issue the customer a new payment card. However, once a person’s PHI has been breached, the PHI has been breached forever.”

In the short paper, you can find some brief comparison of logging requirements between PCI and HIT and also find the outcome, that HIT needs to catch up with the PCI and hopefully surpass the PCI in terms of securing and protecting personal heath information. Interesting …

About these ads