On Tech Ethics with CITI Program
Discusses a broad range of technology ethics topics. Hosted by Daniel Smith, Associate Director of Content and Education at CITI Program. New episodes every month. Learn more at about.citiprogram.org.
On Tech Ethics with CITI Program
Managing Healthcare Cybersecurity Risks and Incidents - On Tech Ethics
•
CITI Program
•
Season 1
•
Episode 35
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Discusses various ethical and practical challenges organizations face in managing cybersecurity risks and responding to breach incidents.
Our guest today is Lynn Sessions, the lead of the Healthcare Privacy and Compliance team and co-lead of the national Healthcare Industry team at BakerHostetler. Lynn focuses her practice on healthcare privacy and data security, breach response, regulatory defense, and Health Insurance Portability and Accountability Act (HIPAA) compliance.
Additional resources:
- BakerHostetler Data Counsel: https://www.bakerdatacounsel.com/
- Health Care Compliance Association: https://www.hcca-info.org/
- American Health Law Association: https://www.americanhealthlaw.org/
- CITI Program’s course catalog: https://about.citiprogram.org/course-catalog
Introduction and Guest Background
Lynn Sessions’ Experience and Role
Ransomware Attacks: To Pay or Not to Pay?
Transparency After a Data Breach
Preventing Future Breaches
Telehealth Devices and Inventory
Vendor Monitoring and Third-Party Breaches
Consultants and Revenue Cycle Vulnerabilities
Change Healthcare Breach and Vendor Risks
Insider Threats and Employee Monitoring
Change Healthcare Breach Explained
Contract Management Challenges
Compliance vs. Practical Implementation
Phishing and Employee Training
Revenue Cycle Roles as High-Risk Targets
Resources and Further Guidance
Final Thoughts: Diligence in Healthcare Security
Outro and Additional Resources