Cybersecurity Practices for Health Care Organizations~ RJ BLANCHARD BENEFIT SERVICES

Data  Channel 



Network

Implementation Specification

Considerations

Implement through Switched Port Analyzer ports from egress network points or through Internet Content Applica�on Protocol on web proxies.



If online, prevent the leakage of unencrypted sensitive data based upon predefined thresholds (e.g., files that contain > 100 records of PHI).



If out of band, activate IR procedures to contain data leakages that occur through the network.

Sub-Practices for Large Organizations 4.L.A

Advanced Data Loss Prevention

NIST FRAMEWKORK REF: PR.DS-5

After implementing basic DLP controls, you should consider expanding your DLP capabilities to monitor other common data access channels. Table 7 recommends methods for your consideration. Table 7. Expanding DLP to Other Data Channels Data Channel  

Cloud storage

Implementation Specification Use cloud access security broker systems to monitor data ﬂows into cloud systems.

Considerations 

Label data identified as sensitive. Implement digital rights and encryption to limit access to sensitive data.



Ensure that cloud-based file storage and sharing systems do not expose sensitive data in an “open sharing” construct without authentication (i.e., do not permit the use of sharing data through a simple URL link).

49

Turn static files into dynamic content formats.

Create a flipbook

Articles inside

Cybersecurity Practices for Health Care Organizations~ RJ BLANCHARD BENEFIT SERVICES

Articles inside

Appendix B: References

Table 13. Incident Response Plays for Attacks Against Medical Devices

Table 15. Acronyms and Abbreviations

Table 14. Example Cybersecurity Policies for Consideration

Cybersecurity Practice #9: Medical Device Security

Table 12. Timeframes for Resolving Medical Device Vulnerabilities

Table 11. Roles and Responsibilities for an Organizational CIRT

Table 9. Factors for Consideration in Penetration Test Planning

Cybersecurity Practice #6: Network Management

Cybersecurity Practice #8: Security Operations Center and Incident Response

Table 10. Example Incident Response Plays for IR Playbooks

Cybersecurity Practice #7: Vulnerability Management

Cybersecurity Practice #5: IT Asset Management

Table 7. Expanding DLP to Other Data Channels

Table 6. Data Channels for Enforcing Data Policies

Table 3. Example of a Data Classification Schema

Table 5. Security Methods to Protect Data

Table 4. Suggested Procedures for Data Disclosure

Cybersecurity Practice #4: Data Protection and Loss Prevention

Cybersecurity Practices at Medium-Sized Health Care Organizations

Table 1. E-mail Protection Controls

Cybersecurity Practice #3: Identity and Access Management

Cybersecurity Practice #2: Endpoint Protection Systems

Table 2. Basic Endpoint Controls to Mitigate Risk at Endpoints

Cybersecurity Practices at Large Health Care Organizations

Cybersecurity Practice #1: E-mail Protection Systems

Introduction