BOSTON—Multiple mechanisms are required to keep your organization safe from its biggest threat—insiders. A panel of CISOs discussed their organizations’ strategies during a session at the Privacy and Security Forum.

BOSTON—If hospital leadership understood the cybersecurity threats facing their organizations, they’d put more than 3 percent of their budget toward the effort, said Richard Clarke, former White House security czar, speaking at the Privacy and Security Forum.

Craig D. Richardville, MBA, FACHE, FHIMSS, senior vice president and CIO at Carolinas HealthCare System, has been named the 2015 John E. Gall, Jr. CIO of the Year.

For a change of pace, a group of healthcare organizations is opposing any delay for Meaningful Use.  

Another organization has been hit with a big fine for HIPAA violations. Triple-S Management Corporation has agreed to settle potential HIPAA violations with the Department of Health and Human Services' (HHS) Office of Civil Rights (OCR) by paying $3.5 million. 

HealthNet, Indiana’s largest federally qualified health center (FQHC), is a 2015 HIMSS Ambulatory Davies Award recipient.  

BOSTON—The very first IT directors hired in healthcare worked in the finance, accounting or human resources. That history of CIOs reporting to CFOs makes the relationship cost-driven instead of strategy driven, said Mansur Hasib, CISSP, PMP, CPHIMS, author and professor in the University System of Maryland, speaking at the Privacy and Security Forum. 

A new data brief from the Office of the National Coordinator reveals that less than half of U.S. hospitals support an infrastructure capable of two-factor authentication.