UAB Health System in Birmingham, Ala., is tackling a long list of information security projects, including updating intrusion detection and prevention systems.\n\n
In an interview, Terrell Herzig, HIPAA security officer, outlines priority projects, including:\n\n
Expanding the use of encryption;\nConducting vulnerability assessments; and\nParticipating in a national effort to securely share information on cancer patients.\n\n
Herzig, who serves as the equivalent of a chief information security officer, heads a team of three security specialists at the delivery system, which includes a 1,000-bed hospital and numerous outpatient facilities throughout the state. \n\n
He is one of the authors of a new book, "Information Security in Healthcare: Managing Risk," published by the Healthcare Information and Management Systems Society.