Health IT Symposium Speakers Offer Tips for Managing Technology’s Risks

Enterprise risk management gives healthcare providers a process to address the multiple risks to healthcare organizations and providers from mobile devices and their various applications, such as social media, said Fay A. Rozovsky, J.D., M.P.H., DFASHRM, president, the Rozovsky Group Inc. (Bloomfield, Connecticut). “Enterprise risk gives us a way to look at the issue globally and use tools smartly and safely with risk we can bite off and accept,” said Rozovsky, speaking at the April 24, 2013, annual risk management and captive insurance symposium, Healthcare Information Technology and You: The Journey, the Challenges, and the Rewards, of Cassatt RRG Holding Company (Malvern, Pennsylvania), a risk retention group. She outlined mobile health risk management strategies by looking at the various enterprise risk domains as follows: human capital (e.g., identify who has access rights, develop required competencies in health information technology IT); operations (e.g., decide whether the organization will provide mobile devices to care providers); technology (e.g., ensure a method to wipe out data from a lost or stolen mobile device, establish infection control measures for the devices); legal and regulatory (e.g., require compliance with privacy and security rules, develop a process to ensure adequate response time to queries submitted via mobile health devices); and financial (e.g., project data storage use requirements).