Cyber Security and Open Source Community Call Seong K. Mun, PhD President and CEO, OSEHRA Arlington, Virginia Webex: TID=ed80e9e1ef fe28dc5f063d03edhttps://osehra.webex.com/osehra/onstage/g.php?M TID=ed80e9e1ef fe28dc5f063d03ed Call-in number: Access code: :00 pm (Eastern) Wednesday, March 16, 2016

OSEHRA at a glance OSEHRA’s Role in OS Community Engagement Objectives of Today’s Planning Call Specific Questions Workgroup Work Schedule About OSEHRA Summit Any Questions or Comments? Please Note: Calls are Recorded for Future Reference and Collected Documents are Open Agenda 2

Established in 2011 Under VA Sponsorship 501(c)(6) Membership-Based Nonprofit Independent Corporation Mission: “Build and support an open source community… engaged in advancing electronic health record software and related health IT.” Current Membership: –25 Organizational Members –1000+ Associate and General Members VA Contract – OS Solutions via Community Engagement OSEHRA at a Glance 3

OSEHRA – Engaging Community – Conducts Gap Analysis – VA Sets Priority – Identifies OS Software – Certifies: Usability of OS Codes License- Documentation-Testing – Offers to VA VA Adoption Process – Issues In-take (Implementation) Contracts – OSEHRA Does Not Compete Role of OSEHRA 4

OSEHRA Ecosystem Make the Code Reusable ANSI OS Certification Effective Repository Product Management Shared Vision and Interests Open Collaboration Promote Business Opportunities Marketing and Advocacy IP Management Transparency Decision Making Authoritative & Neutral SKM

Planning for Response –Volunteers –Process –Work organization –Support Environment Schedule Today’s Objectives 6

1.Does the open source community have a focus on cybersecurity? 2.Are projects to enhance cybersecurity proposed to OSEHRA by the open source community? If so, have any been completed? 3.Are there lessons learned from Red Hat/LINUX WRT cybersecurity that might be applicable to health IT? 4.What is the relationship of OSEHRA certification to cybersecurity? Specific Questions 7

Does the open source community have a focus on cyber security – OSEHRA Has Not – OSEHRA Members May Have – Greater OS Community Has i.e. Department of Homeland Security i.e. National Security Agency Any Existing Communities? – Participant Discussion? Discussion 1 8

Are projects to enhance cybersecurity proposed to OSEHRA by the open source community? If so, have any been completed? – No Such Proposal Has Been Made So far – Participant Discussion Discussion 2 9

Are there lessons learned from Red Hat/LINUX WRT cybersecurity that might be applicable to health IT? – Discussion from RedHat – Note: There has been some discussions on VistA Cloud Discussion 3 10

What is the relationship of OSEHRA Certification to cyber security? – Currently OSEHRA certification does not cover cyber security – Can software be certified for cyber security when much of it has to do with specific implementation even with OS solutions – Participant Discussion Discussion 4 11

1.Does the open source community have a focus on cyber security? – Volunteer 1 2.Are projects to enhance cybersecurity proposed to OSEHRA by the open source community? If so, have any been completed? – Volunteer 2 3.Are there lessons learned from Red Hat/LINUX WRT cybersecurity that might be applicable to health IT? – Volunteer 3 4.What is the relationship of OSEHRA certification to cybersecurity? – Don Hewitt Need Lead Volunteers 12

Create a Workgroup Please Sign Up Create Workgroup Resources – Co-chairs - Volunteers – Section Leaders - Volunteers – Reference Documents – Draft Response Documents – Members Weekly Virtual Meetings Next Step: Workgroup Support 13

OSEHRA Cybersecurity Workgroup Onboarding 1.Join OSEHRA as an Associate member (free)Join OSEHRA 2.Join Cybersecurity Workgroup to receive meeting notice and minutes.Join Cybersecurity Workgroup Workgroup Resources (located at the Group homepage)Group homepage –Co-chairs - TBD –Section Leaders - TBD –Reference Documents List –Draft Response Documents –Members Weekly Call Meetings (Weekly: Wed, 1:00 PM Eastern) –Webex: e1ef fe28dc5f063d03edhttps://osehra.webex.com/osehra/onstage/g.php?MTID=ed80e9 e1ef fe28dc5f063d03ed Call-in number: , Access code: Cybersecurity Workgroup 14

Weekly Calls 1:00 PM (Eastern) – Volunteer Leaders Will Facilitate Wednesday, March 23 Wednesday, March 30 Wednesday, April 6 Wednesday, April 13– SUBMISSION TO VA Workgroup Schedule 15

Bethesda North Marriott Hotel & Conference Center Monday, June 27 – Wednesday, June 29 Monday (1:00pm – 7:00pm) Global Open Health Informatics Workshop Welcome Reception Tuesday (7:30am – 7:30pm) Keynote Speakers, Exhibits, Posters, Breakout Sessions Reception Wednesday (7:30am – 3:00pm) eHMP Town Hall Meeting, Breakout Sessions, VA Leadership Panel, Exhibits, Posters Sponsorship & Exhibitor Opportunities are Available! summit.oshera.org or contact Desereé at 2016 OSEHRA Summit 16

Thoughts? Comments? Questions? Closing… 17

Adjournment