Information Security Officer (ISO)

An organization’s Information Security Officer (ISO) has the responsibility of protecting PHI and PII that is electronically stored or transferred by implementing and monitoring compliance with organization policy. The ISO is often a separate department from the main information technology group as to provide unbiased jurisdiction over IT activities. The ISO also has the responsibility to keep up with industry standards (such as HIMSS) and national standards (such as the (HIPAA) for information security.