Health care cybersecurity underinvestment can be remedied with ISO 27001, says IT Governance

ISO 27001 enables a cohesive digital cybersecurity framework that will help mitigate the worrying rate of cyber crime in the health care industry.

Registering its ISMS to the Standard proves that an organization is following international best practice.
— Alan Calder, founder and executive chairman of IT Governance
BOISE, IDAHO, USA, October 1, 2015 /EINPresswire.com/ -- The recently released KPMG report Health Care and Cyber Security: Increasing Threats Require Increased Capabilities confirms a worrying lack of cybersecurity investment in the health care industry, which is opening the sector up to cyber crime and putting patients’ Protected Health Information (PHI) at risk. According to the report, 80% of health care providers and payers have now been “compromised by cyber-attacks”.

The report concludes that “Investment in security needs to become part of a cohesive, coordinated digital strategy” if it is to be beneficial rather than wasteful. The international cybersecurity provider IT Governance notes that the international standard ISO 27001 enables such a strategy, setting out a comprehensive, company-wide framework for managing cybersecurity risks and protecting an organization’s information assets.

Alan Calder, the founder and executive chairman of IT Governance, says, “US health care organizations are bound by the Health Insurance Portability and Accountability Act (HIPAA), whose Administrative Simplification rules regulate the use and disclosure of PHI. Thanks to its all-inclusive approach, ISO 27001 covers the information security elements of HIPAA by providing an auditable ISMS designed for continual improvement.

“Registering its ISMS to the Standard proves that an organization is following international best practice. ISO 27001 registrations are increasingly popular in the US: the latest ISO Survey shows that there was a 17.4% increase in registrations to the Standard last year, reflecting the government’s agenda and the growing need for best-practice cybersecurity across the nation.”

An ISO 27001-compliant information security management system (ISMS) is a risk-based approach to information security management that encompasses the entire organization, covering people, processes, and technology.

Although health care organizations, like other industries, can remedy cybersecurity underinvestment efficiently and cost-effectively by implementing an ISO 27001-compliant ISMS, doing so requires expertise. Fortunately, IT Governance’s ISO 27001 Learning Pathway provides ISO 27001 training and qualifications for delegates all over the world.

Built on the foundations of the company’s extensive practical experience of designing and implementing ISMSs, IT Governance’s ISO 27001 training courses provide a structured learning path for practitioners and implementers alike, helping delegates to develop the skills they need in order to deliver best practice and compliance in their organizations, as well as providing the tools for career advancement via industry-standard qualifications.

And thanks to IT Governance’s unique Live Online training courses, anyone in the US – and, indeed, anyone in the world – can attend an expert-led training course without incurring the costs and inconveniences traditionally associated with classroom-based training courses.

Live Online ISO 27001 training courses include ISO 27001 Foundation, Lead Implementer, Lead Auditor, and Transition.

For more information about IT Governance’s Live Online ISO 27001 training courses, please see: www.itgovernanceusa.com/liveonlinetraining.aspx.

Alternatively, organizations can call IT Governance toll-free on 1-877-317-3454 or email servicecenter@itgovernanceusa.com for more information on how IT Governance can help protect their information security.

Melanie Watson
IT Governance
08450701750
email us here