In the world of information security, well-defined security programs are the forests, and regulations like HIPAA, SoX and PCI are the trees. And too many healthcare organizations mistake the forest for the trees.
By way of analogy, one of the benefits of Social Security is SSI or Supplemental Security Income. The operative word is supplemental. Social Security is meant to augment your retirement, not be the main income source for your retirement. HIPAA is much like SSI and meant to supplement your formal information security program. If you view HIPAA as the end-all of your information security and privacy program, you are in huge trouble.
This white paper will detail how to go beyond HIPAA by showing how to use HIPAA as the starting point for your security program, and then using best practices and Lumension Security solutions to improve your overall security posture.
Software Quality Research Library
