TOPIC
Security
12 entries across the knowledge base
Zero trustNever trust the network, always verify the request — the security model for a world where the perimeter already failed.concept · 6 min · foundationThreat modelingAsk what could go wrong before you build it. STRIDE, trust boundaries, and the health-specific threat actor nobody puts in the diagram: the curious colleague.article · 7 min · practitionerOWASP Top 10The ten most common web application security risks, read through a clinical lens — where broken access control isn't a bug report, it's someone reading a stranger's psychiatric notes.article · 7 min · practitionerNetworking basicsEnough network to reason about a health system: what the layers are, why segmentation matters more here than anywhere, and the infusion pump on the same VLAN as the reception PC.article · 7 min · foundationIdentity & accessWho are you, and what may you do? Health breaks the textbook answer, because the clinician who must not see this chart today may need to see it tonight to save a life.article · 7 min · practitionerEncryption & PKIEncryption at rest protects against a stolen disk. It does nothing against the way health data actually leaves — which is a valid credential doing what it was allowed to do.article · 7 min · practitionerCyber hygieneThe unglamorous basics that prevent most breaches — and why every one of them fails in a hospital for the same reason: the safe path was slower than the work allowed.article · 7 min · foundationBackup & DRAn untested backup is a rumour. Ransomware turned backups from insurance into the primary defence — and the number that matters is how long a hospital can run on paper.article · 7 min · practitionerAudit loggingIn health, the audit log is not diagnostics — it is the record that answers 'who looked at my file?' It is a legal instrument, and almost nobody reads it until it is too late.article · 7 min · practitioner
HITRUST · ISO 27001Certifications that prove you have a security management system. What they actually attest to, what they don't, and why a certificate is a floor rather than a finish line.article · 7 min · practitionerHIPAA essentialsThe US baseline for protecting health information: who it covers, the Privacy and Security Rules, and what 'minimum necessary' and breach notification actually require.article · 5 min · foundation