Wireless is no longer a novelty in hospitals
Comments
The biggest drawback to using wireless in hospitals, etc. is their inherent security risk. There are specific and unique vulnerabilities associated with the use of wireless technology. The largest is exposure of electronic Protected Health Information (ePHI) to unauthorized persons – this is called a “Breech†and can impact a patient whose information is breeched and an organization who commits the breech in different ways. The rules that govern transmission of ePHI are principally associated with the two Implementation Specifications under HIPAA Security Technical Safeguard at 45 CFR 164.312(e)(1) - Transmission Security. The two Implementation Specifications are Integrity Controls and Encryption. You must encrypt the data when it is transmitted. The basic wireless encryption protocol (WEP) is essentially worthless. There are some newer protocols: WPA, Leap, EAP-Fast and WPA2; however, these still have some vulnerability and associated risk. The world will get there; however, the hackers are getting better.
Oran Silvey
osilvey@qssinc.com
(410) 963-2159
