Importance of AHCCCS Security Measures and Compliance Standards
Explore the significance of maintaining robust security measures within the AHCCCS system, including adherence to federal and state standards, recent security breaches, AHCCCS's proactive security actions, and expectations for stakeholders. Learn about the steps AHCCCS is taking, such as annual assessments and external audits, to ensure data security and compliance with regulations. Discover what is expected from stakeholders, including contractual security language, remediation efforts, and third-party audits for enhanced security assurance.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
AHCCCS SYSTEM SECURITY Why is Security SO important? Federal and State standards Security breaches in the last year What AHCCCS is doing What we are expecting of you Questions 1
FEDERAL AND STATE STANDARDS Federal requirement HIPAA Covers both Privacy and Security AHCCCS utilized HIPAA consultants to assist with: GAP analysis (as-is and target environments) Remediation Plan Part of that is on-gong Annual HIPAA Security Self Assessment State Standards 2
SECURITY BREACHES State of Utah up to 200K files stolen; information on up to 750K people hacked due to a configuration issue State of Alaska USB thumb drive stolen w/member data; fined in 2012 State of South Carolina - Information on 228K people stolen by an employee via email ASU obtained password, used to steal list of user-id & passwords AZ DPS 8 E-mail accounts hacked Our responsibility: As Health Care professionals, take SECURITY seriously 3
WHAT AHCCCS SECURITY IS DOING Annual HIPAA Security Self Assessment (Audit) Stach & Liu Security Audit External Penetration Test Detailed assessment of our web-based applications Wireless environment Completed, working on remediation Working on an SSAE-16 audit Focused on Security In Process Completed assessment , awaiting preliminary findings
WHAT WE ARE EXPECTING OF YOU Security language is/will be included in the contracts Includes initial and annual assessments Actively worked remediation plan Providing our HIPAA Security Self Assessment Audit tool that we utilize Best if Audit to be conducted by an independent third party; required by contract Only as good as you make it Questions? 5
