Procedures for Establishing User Access Controls to Electronic Protected Health Information

Our emphasis for this paper is on the technical implications of database user access controls. This paper presents a practical case where three separate agencies, each representing a different aspect of health care, intend to share electronic protected health information (ePHI) with the goal of...

By

Barbara Filkins

November 14, 2004

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Why SANS - Blog - Zero Trust - Building a Zero Trust Framework- Key Strategies for 2024 and Beyond_340 x 340(1).jpg

Cybersecurity Insights

Building a Zero Trust Framework: Key Strategies for 2024 and Beyond

Zero Trust is not just a set of security tools but a foundational shift away from legacy security concepts focused on perimeter-based controls.

GIAC Certifications

Why SANS - Blog - WFS Case Studies - Black Rainbow_340 x 340.jpg

Cybersecurity Insights

Strategies for Training and Hiring in the US Government: A Black Rainbow Case Study

Despite hiring challenges, continuous education and adaptive training programs are key to developing a robust cybersecurity workforce.

GIAC Certifications

Why SANS - Blog - WFS Case Studies - Mastercard_340 x 340.jpg

Cybersecurity Insights

Lessons Learned on the Impact of Training on Hiring Success: A Mastercard Use Case

Jon Brickey shares his approach to fortifying Mastercard’s cybersecurity capabilities through diverse and comprehensive training initiatives.

GIAC Certifications