Difference between revisions of "Information Security Officer (ISO)"

From Clinfowiki
Jump to: navigation, search
(Created page with "An organization’s '''Information Security Officer''' ('''ISO''') has the responsibility of protecting PHI and PII that is electronically stored or transferred by implementing a...")
 
Line 1: Line 1:
An organization’s '''Information Security Officer''' ('''ISO''') has the responsibility of protecting PHI and PII that is electronically stored or transferred by implementing and monitoring compliance with organization policy. The ISO is often a separate department from the main information technology group as to provide unbiased jurisdiction over IT activities. The ISO also has the responsibility to keep up with industry standards (such as HIMSS) and national standards (such as the (HIPAA) for information security.
+
An organization’s '''Information Security Officer (ISO)''' has the responsibility of protecting [[Protected Health Information (PHI)|PHI]] and PII that is electronically stored or transferred by implementing and monitoring compliance with organization policy.
 +
 
 +
== Introduction ==
 +
 
 +
The ISO is often a separate department from the main information technology group as to provide unbiased jurisdiction over IT activities. The ISO also has the responsibility to keep up with industry standards (such as HIMSS) and national standards, such as the ([[Health Insurance Portability and Accountability Act (HIPAA)|HIPAA]], for information security.

Revision as of 14:50, 9 March 2012

An organization’s Information Security Officer (ISO) has the responsibility of protecting PHI and PII that is electronically stored or transferred by implementing and monitoring compliance with organization policy.

Introduction

The ISO is often a separate department from the main information technology group as to provide unbiased jurisdiction over IT activities. The ISO also has the responsibility to keep up with industry standards (such as HIMSS) and national standards, such as the (HIPAA, for information security.