1. CyberSecure: Your Medical Practice
Video Game Training for Providers and Staff
October 25th, 2012

2. CyberSecure: Your Medical Practice
Information security awareness training is a requirement mandated by the HIPAA security rule. To assist providers in meeting this requirement ONC is developing a number of modules. CyberSecure: Your Medical Practice, is the first of five interactive online training courses. CyberSecure uses an innovative computer gaming model to effectively engage healthcare practitioners and their staff and teach critical privacy and security strategies to help safeguard protected health information and ensure HIPPA compliance.

3. CyberSecure: Your Medical Practice
CyberSecure: Your Medical Practice Teaches:
Best practices to keep passwords secure
Strategies to protect patient information
How to control access to patient information
Use of software to block computer viruses
How to secure and encrypt information residing on mobile devices

4. CyberSecure: Your Medical Practice
How CyberSecure Works:
Players receive questions by avatars posing as medical staffers and must choose the correct response from multiple choice answers.
By attempting to make the best choices to secure health information and protect IT assets, players aim for the top score over three rounds of play.
Depending on how well they score, players will see enhancements made to their medical practices or see their practices suffer as a result of poor IT security decisions.

5. CyberSecure: Your Medical Practice

6. ONC Privacy and Security Initiatives

7. Snapshot of OCPO Research & Internal Initiatives
Patient and Provider ID Proofing and Authentication
Data Segmentation for Privacy Initiative
Demonstration Planned 1st Q 2013
eConsent Trial Project
Launch in October 2012
Mobile Device Portfolio
Mobile Device Provider Education
Mobile Device Research Project
Privacy and Security Consumer Attitudes Survey
SHARPS project on Mobile Health
Guide to Privacy and Security of Health Information
Provider and Staff Security Video Games 6 6

8. Helping Providers Integrate Privacy and Security into Their Culture
Designed to help health care practitioners and practice staff understand the importance of privacy and security of health information at various implementation stages
Developed with assistance from the American Health Information Management Association (AHIMA) Foundation, with input from OCR and OGC
Available at:
*OCPO developed this guide with assistance from an ONC cooperative agreement partner, the American Health Information Management Association (AHIMA) Foundation.
We recently released a Guide to Privacy and Security of Health Information,
Designed to help health care practitioners and practice staff better understand the important role privacy and security in the use of EHRs and how to conduct the best practices to safeguard health information
Privacy and security are key components to building the trust required to realize the potential benefits of electronic health information exchange. Protecting the privacy and security of health information must be a primary goal of health care providers and organizations. It’s also a vital part of Meaningful Use. 
We issued the guide to give providers/organizations with a useful tool to help them integrate privacy and security into their medical practices (including HIPAA and Meaningful Use requirements).
Overall goal of the goal of the guide is to help ensure the privacy and security of health information, including information in electronic health records (EHR) and mobile devices. 
Instructional guide designed to help healthcare practitioners, staff, and other professionals better understand the important role privacy and security play in the use of electronic health records (EHRs) and Meaningful Use. 7 7

9. Questions?