Managing Healthcare Cybersecurity Risks and Incidents - On Tech Ethics

Discusses various ethical and practical challenges organizations face in managing cybersecurity risks and responding to breach incidents. 

Our guest today is Lynn Sessions, the lead of the Healthcare Privacy and Compliance team and co-lead of the national Healthcare Industry team at BakerHostetler. Lynn focuses her practice on healthcare privacy and data security, breach response, regulatory defense, and Health Insurance Portability and Accountability Act (HIPAA) compliance. 
 

Additional resources: 

• BakerHostetler Data Counsel: https://www.bakerdatacounsel.com/ 
• Health Care Compliance Association: https://www.hcca-info.org/ 
• American Health Law Association: https://www.americanhealthlaw.org/ 
• CITI Program’s course catalog: https://about.citiprogram.org/course-catalog  

Chapters

• 0:03 Introduction and Guest Background
• 1:05 Lynn Sessions’ Experience and Role
• 2:18 Ransomware Attacks: To Pay or Not to Pay?
• 5:28 Transparency After a Data Breach
• 8:46 Preventing Future Breaches
• 12:37 Telehealth Devices and Inventory
• 13:53 Vendor Monitoring and Third-Party Breaches
• 16:39 Consultants and Revenue Cycle Vulnerabilities
• 17:11 Change Healthcare Breach and Vendor Risks
• 21:55 Insider Threats and Employee Monitoring
• 26:52 Change Healthcare Breach Explained
• 30:46 Contract Management Challenges
• 34:55 Compliance vs. Practical Implementation
• 39:38 Phishing and Employee Training
• 43:37 Revenue Cycle Roles as High-Risk Targets
• 45:21 Resources and Further Guidance
• 47:14 Final Thoughts: Diligence in Healthcare Security
• 47:48 Outro and Additional Resources