Information Security Officer (ISO)

From Clinfowiki
Revision as of 14:50, 9 March 2012 by Annathehybrid (Talk | contribs)

Jump to: navigation, search

An organization’s Information Security Officer (ISO) has the responsibility of protecting PHI and PII that is electronically stored or transferred by implementing and monitoring compliance with organization policy.

Introduction

The ISO is often a separate department from the main information technology group as to provide unbiased jurisdiction over IT activities. The ISO also has the responsibility to keep up with industry standards (such as HIMSS) and national standards, such as the (HIPAA, for information security.