Title: Describe cybersecurity measures related to HIPAA.
Course: Healthcare Information Security (14157-II) > Section: Exploring HIPAA Basics

Description should include

  - HHS guidance for covered entities
  - OCR monthly newsletter
  - threat of medical identity theft
  - threat of ransomware
  - FACT SHEET: Ransomware and HIPAA (https://www.hhs.gov/sites/default/files/RansomwareFactSheet.pdf?language=es)
  - HHS Cybersecurity Newsletter Archives (https://www.hhs.gov/hipaa/for-professionals/security/guidance/cybersecurity/cybersecurity-newsletter-archive/index.html)
  - Cyber-Attack Checklist (https://www.hhs.gov/sites/default/files/cyber-attack-checklist-06-2017.pdf)
  - Cyber-Attack Quick Response (https://www.hhs.gov/sites/default/files/cyber-attack-quick-response-infographic.gif)
  - Federal Trade Commission’s FAQ on Medical Identity Theft (https://www.ftc.gov/system/files/documents/plain-language/bus75-medical-identity-theft-faq-health-care-health-plan.pdf).

Teacher Resources:

- The hospital held hostage by hackers (https://www.cnbc.com/2016/02/16/the-hospital-held-hostage-by-hackers.html), CNBC
- Cybersecurity vulnerabilities in medical devices: a complex environment and multifaceted problem (https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4516335/), Dove Press
- The biggest healthcare data breaches of 2018 (so far) (https://www.healthcareitnews.com/projects/biggest-healthcare-data-breaches-2018-so-far), Healthcare IT News

Process/Skill Questions:

    - What are dumpster diving, shoulder surfing, social engineering, and tweaking?
    - What are the cyber risks related to the use of personal devices in the healthcare setting?
    - What are the steps to securing transactions on personal devices?