CyberSecure: Your Medical Practice Video Game Training for Providers and Staff October 25th, 2012

CyberSecure: Your Medical Practice Information security awareness training is a requirement mandated by the HIPAA security rule. To assist providers in meeting this requirement ONC is developing a number of modules. CyberSecure: Your Medical Practice, is the first of five interactive online training courses. CyberSecure uses an innovative computer gaming model to effectively engage healthcare practitioners and their staff and teach critical privacy and security strategies to help safeguard protected health information and ensure HIPPA compliance.

CyberSecure: Your Medical Practice CyberSecure: Your Medical Practice Teaches: Best practices to keep passwords secure Strategies to protect patient information How to control access to patient information Use of software to block computer viruses How to secure and encrypt information residing on mobile devices

CyberSecure: Your Medical Practice How CyberSecure Works: Players receive questions by avatars posing as medical staffers and must choose the correct response from multiple choice answers. By attempting to make the best choices to secure health information and protect IT assets, players aim for the top score over three rounds of play. Depending on how well they score, players will see enhancements made to their medical practices or see their practices suffer as a result of poor IT security decisions.

CyberSecure: Your Medical Practice

ONC Privacy and Security Initiatives

Snapshot of OCPO Research & Internal Initiatives Patient and Provider ID Proofing and Authentication Data Segmentation for Privacy Initiative Demonstration Planned 1st Q 2013 eConsent Trial Project Launch in October 2012 Mobile Device Portfolio Mobile Device Provider Education Mobile Device Research Project Privacy and Security Consumer Attitudes Survey SHARPS project on Mobile Health Guide to Privacy and Security of Health Information Provider and Staff Security Video Games 6 6

Helping Providers Integrate Privacy and Security into Their Culture Designed to help health care practitioners and practice staff understand the importance of privacy and security of health information at various implementation stages Developed with assistance from the American Health Information Management Association (AHIMA) Foundation, with input from OCR and OGC Available at: http://www.healthit.gov/providers-professionals/ehr-privacy-security *OCPO developed this guide with assistance from an ONC cooperative agreement partner, the American Health Information Management Association (AHIMA) Foundation. We recently released a Guide to Privacy and Security of Health Information, Designed to help health care practitioners and practice staff better understand the important role privacy and security in the use of EHRs and how to conduct the best practices to safeguard health information Privacy and security are key components to building the trust required to realize the potential benefits of electronic health information exchange. Protecting the privacy and security of health information must be a primary goal of health care providers and organizations. It’s also a vital part of Meaningful Use.  We issued the guide to give providers/organizations with a useful tool to help them integrate privacy and security into their medical practices (including HIPAA and Meaningful Use requirements). Overall goal of the goal of the guide is to help ensure the privacy and security of health information, including information in electronic health records (EHR) and mobile devices.  Instructional guide designed to help healthcare practitioners, staff, and other professionals better understand the important role privacy and security play in the use of electronic health records (EHRs) and Meaningful Use. 7 7

Questions?