A third party organization that processes insurance claims for providers

Considered to be individually identifiable information relating to the treatment or diagnosis of a PT such as:

Diagnoses, Treatment info, Medical test results, Prescription information, Demographics

PHI includes:

At least how many PII identifiers are in a PT's EHR

Represents the potential for an attacker to violate security and cause harm to assets

Weakness that may be exploited

An act or control that reduces risk

A method of bypassing normal authentication, securing remote access to a computer and data while attempting to remain undetected

Software designed for malicious purposes such as causing damage to a system or creating a ____ in the system

Piece of self-replicating software code that attaches itself to a program file or the sector of a disk

program in which a malicious or harmful code is contained inside an apparently harmless piece of data or program allowing it to gain control and do damage to the computer system

Type of malware (typ. hidden from the user) that can be installed on a computer with the purpose of collecting info about users without their knowledge

Typically Messaging protocol

Typically handles images

not a software app.

A large set of rules.

Non-profit organization formed by a group of radiologists and IT experts

HL7-DICOM Image Management Group which developed a standard approach to the interconnection between 2 protocols.

a.k.a. HL7-DICOM ISIS.

how a process is done

Addresses the security of ePHI

Supports the enforcement of HIPAA

est. reg. for the ability for a PT to find out who their ePHI has been released to.

Basic, least skilled.

Employ their scripts during design of the system

Politically motivated attackers who attack systems belonging to organizations that are either opposed to their agenda.

dominant category of hackers

target organization in order to make money through extortion.

A program that duplicates itself from one directory, drive, computer or network to another through electronic communication

Social engineering to attack a large group of users

cyber-attack which usually targets specific users via email

Limited power and resources of medical equipment means that encryption will likely slow down device performance and reduce battery life.

Most detrimental factor which causes cyber-security to be an issue in medical devices is the belief that cyber-security is only the responsibility of the IT department

Health IT involves the ____ of information systems used by healthcare professionals

Health IT does NOT involve the ____ of information systems used by healthcare professionals

to perform precision medicine tailored to individuals pts you need

the emergence nad importance of IT in HC has been advanced by two factors:

the most important part of Health IT

Apple Health app and Google Fit are examples of

HIE - Health Information Exchange

provide a way for pts to communicate securely with their medical team, pay medical bills, download medical records

enable secure video conversations between patients and providers

developed to facilitate the exchange of the electronic healthcare data between various hospital info systems

Operates at layer 7 of the OSI model

typically have a .dcm extension and the data contains both PT data and images

DICOM is made up of ___ different sections ranging from image display to media storage

operates in the upper layers of the OSI 7

DICOM and HL7 provide established standards; however, issues with interoperability between differing systems/manufacturers.

Two primary entities that are required to be in compliance with HIPAA and HITECH

health care clearing houses fall under

Medical Device Compliance should require

HIPAA medical device compliance is a shared responsibility between the:

Organizations involved in managing and improving cyber-security

A method of bypassing normal authentication, securing remote access to a computer and data while attempting to remain undetected

WPA2 Enterprise is the ____ authentication available

If you have older medical equipment, it is smart to create a separate ____.

3 forms of authentication are

Ensure Anti-virus is enables on each device

if no anti-virus, perform an anti-virus scan each time

Make each device as tamper resistant as possible

Physicians, BMETS, IT Dept, and Cybersecurity

Unique identifier for a DICOM device

The end point of a DICOM

Single device can have multiple

Typically set up during installation of a device

Current or previous exam being viewed

May consist of 2 or 3 images OR an MRI

Provide a list of task to be performed such as interpretation of an image or performing an x-ray on a PT.

Manages the status of a task so multiple users can acces.

Indicates when an image is being read and locks the study.

Departments using PACS technology include

Defines how a set of image (how many / how displayed) will be displayed on a monitor for a radiologist.

Radiologist interpreting a medical image while not physically present at the location

A PAC workstation will frequently have complex software such as 3D animation or computer-aided diagnosis (CAD), which allows radiologists and techs to

contains text data describing the image and PT

The image itself

DICOM files can also be converted to other formats such as

PACS 4 major components

Digital x-ray, Computed tomography, MRI, ultrasound

Digital x-ray, Computed tomography, MRI, ultrasound

needs to be secure to ensure PT privacy and protect the info being exchanged

Needs to be fast allowing the timely movement of images. (Gigabit Ethernet is preferred)

The most interactive part of PACS.

Monitors are specialized for high image quality.

FDA specifies that all mammography images must be viewed on a 5MP monitor

FDA specifies that all mammography images must be viewed on a ___ monitor

Workstations primary usage:

frequently cloud-based OR hybrid-cloud

PACS System architectures

Centrally located

Stand alone system

both the images and application software for the client display are held centrally

Device invoking the operation.

Sets up the association

PACS server is a ____ when it provides storage for images

Allows a device which created images to check that the images have been safely stored by a server (SCP) before deleting the images from its own cache

Measured in candela per square meter (cd/m^2)

Rates the degree of difference of a monitor's ability to produce bright whites and dark blacks

The time it takes for the LC inside a screen panel to respond to applied current

Commercial grade is limited to 256 shades

Medical grade can offer up to 4096

Commercial grade is typically 300:1

Medical grade 1000:1

Differences are important when using a monitor in an area with bright ambient light (ER or ICU)

Light output of a monitor varies with the temperature which must stabilize for about 30-60 minutes.

Grayscale Standard Display Function (GSDF) states that the luminance of a display is such that an observer's perception of an image contrast is ____ throughout the pixel value range of a displayed image

photometer is: