Cyber and Technology Risk Management Forum, Park City, UT

7+( $57 2) &<%(56(&85,7< 0(75,&6

HIPAA Compliance Reporting

5HTXLUHG

ϲϱ ϯϴ ϲϯ ϴϴ ϴϯ ϱϭ ϱϬ ϴϴ

6HFXULW\ 0DQDJHPHQW 3URFHVV

5HFRPPHQGHG 5HFRPPHQGHG $GGUHVVDEOH 5HFRPPHQGHG $GGUHVVDEOH 5HFRPPHQGHG $GGUHVVDEOH

$VVLJQHG 6HFXULW\ 5HVSRQVLELOLW\

:RUNIRUFH 6HFXULW\

,QIRUPDWLRQ$FFHVV 0DQDJHPHQW

6HFXULW\$ZDUHQHVV 7UDLQLQJ

5HFRPPHQGHG

ϳϭ

5HTXLUHG

ϱϬ

6HFXULW\ ,QFLGHQW 3URFHGXUHV

5HFRPPHQGHG

ϭϭ ϳϰ ϰϮ ϲϬ ϲϮ

5HTXLUHG

&RQWLQJHQF\ 3ODQ

$GGUHVVDEOH 5HFRPPHQGHG 5HFRPPHQGHG

(YDOXDWLRQ

%XVLQHVV$VVRFLDWH &RQWUDFWV 2WKHU $UUDQJHPHQWV

5HTXLUHG

ϳϮ

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ

7+( $57 2) &<%(56(&85,7< 0(75,&6

Example Security Metric(s)- Access

‰ 4XDUWHUO\ 0HWULFV IRU $XGLW DQG &RPSOLDQFH ƒ 1XPEHU RI GRUPDQW DQG LQDFWLYH DFFRXQWV ƒ 3HUFHQWDJH DFFRXQWV IRU WUDQVIHUUHG HPSOR\HHV WKDW KDYH KDG DFFHVV SULYLOHJHV UHYLVHG ZLWKLQ GD\V ƒ $XGLW UHVXOWV IURP SULYLOHJH DFFRXQW DXGLWV ƒ 3HUFHQWDJH RI SDVVZRUGV WKDW GRQ¶W PHHW FRPSOH[LW\ UHTXLUHPHQWV

0HHWV &ULWHULD Factual

Quantitative Comparative Measured consistently Actionable

0,67UDLQLQJ,QVWLWXWH ,QF ‹,QQRYDWLYH,7//&

6OLGH

,7*=

0,6 7UDLQLQJ ,QVWLWXWH ,QF

3DJH

,7*=

‹ LL7 &RQVXOWLQJ