Population Adapting Clinical Risk Management for I.T. | Cybersecurity

Program Description:

Population Health is generally defined as having three components: health outcomes, patterns of health determinants, and policies and interventions. Cybersecurity is no different and serves as the Quality and Medical Records part of IT. In fact the structure of a healthy and reliable cybersecurity program looks very similar to a healthy and reliable clinical program. We encourage you to look at the building blocks for what makes a high performance and reliable cybersecurity program. During this session we will look at how to integrate cybersecurity into the broader risk management program along with the role Clinical and Operational Leadership have for cybersecurity. A good cybersecurity program is very similar to a good population health program; the context and interventions are just different.

HCSSA Topic(s) Addressed:

• §558.259[d][4] agency responsibilities
• §558.260[a][3] basic principles of management in a licensed health-related setting
• §558.260[a][6]risk assessment and management

Education-Training Credits:

• TX HCSSA Administrator/Alternate Continuing Education
  • 1.0 Clock Hr(s)

About the Presenter(s): Brad Maughan

Brad is a Regional Director at CyberForce|Q working with healthcare and other critical infrastructure organizations, to provide a better approach to cybersecurity. With over 20 years of experience focused on Healthcare, IT Security, Privacy and Telecommunications, he is passionate about helping organizations successfully manage the evolving cybersecurity landscape. Before joining CyberForce|Q, Brad worked in data privacy and with an emerging startup providing cyber risk management services to health systems. He is a certified Health Care Information Security and Privacy Practitioner (HCISPP) and a frequent volunteer at a 99-bed hospital near his home. Helping organizations protect patient data and improve patient outcomes continues to drive and animate his efforts.

About the Presenter(s): Wayne Pierce

Wayne is an established cybersecurity consultant with over 26 years of experience in cybersecurity, skilled in information security program implementation, quantifiable measurement, and strategic advancement. He helps implement quantifiable information security programs with guaranteed improvement as well as successfully guides organizations through the alignment of security controls and regulatory requirements. Examples include CIS CSC 18, NIST CSF, ISO 27001, PCI-DSS, CMMC, and HIPAA. Wayne has helped organizations develop policies, procedures, reporting capabilities, and metrics to support program requirements. He collaborates with client leadership to develop reasonable and effective security strategies leading to the implementation of security technology integrations for real-time-audit of security controls. His professional certifications include Certified Information Security Manager (CISM) and Certified Chief Information Security Officer (CCISO).