Editor’s note: Insiders with malicious intent can cause a lot of damage to healthcare organizations by misuing PHI. By taking a look at the crimes insiders commit, healthcare organizations can learn how to help reduce these threats. This is the second in a series of tips from the HCPro, Inc. newsletter Briefings on HIPAA to help fight threats from the inside.
Be proactive.
Your IT department logs activity on your systems. But typically IT uses those logs after the fact-something happens and they review the logs to see who might have inappropriately accessed information.Try to implement controls that will prevent unauthorized use and attempt to detect inappropriate activity as early as possible to minimize the impact, said Randall F. Trzeciak, technical team lead of the Insider Threat Research Group, which is part of the federally funded Software Engineering Institute CERT® program at Carnegie Mellon University in Pittsburgh.





