6 STEPS to EFFECTIVEDATA BREACH RESPONSE
An Action Plan for Healthcare IT
Whether a device containing sensitive information is lost or stolen, breached withmalicious intent or unsecured by accident, the costs and consequences are the same.
How a healthcare organization responds can be the difference between a simple
security incident and long-term reputation and financial damage.
Follow these six steps to keep your cool and emerge as unscathed as possible if
your data is threatened.

ACTIVATEYOUR RESPONSE
PLAN OF ACTION

1Assemble a crisis management teamto plan and practice how to respondto a breach. This will eliminate a panic
situation in the event of a realbreach and allow for afaster response.

LIMITTHE DAMAGE

2

Determine the facts of the breach.
Then, depending on how severe, either
remotely freeze or delete the data on
the device to keep the problem
from spreading.

UNDERSTAND
THE REGULATIONS

3

Ensure the team has the most current
iterations of breach notification laws,
such as HITECH, HIPAA andGramm-Leach-Bliley Act.

4COLLECT,DOCUMENT AND
ANALYZE EVIDENCE!

Risk assessment must demonstratethat due diligence was completedwith consistent and defensible
methodologies.

DETERMINE
THE EXTENTOF THE DAMAGE

5Was the breach accidental or malicious?
Who was affected? What types of data
were accessed? Answers to thesequestions determine the levelof exposure.

SEND COMPLIANTNOTIFICATIONS

6If required to send data breach
notifications, determine the channels
through which patient, regulatory,
and media notifications
will be sent.

TAKEAWAYS:
While healthcare organizations must support a mobile workforce,
they must also ensure and prove that PHI is secure, and thatthey are in compliance at all times. Technology solutions thathelp IT enable staff mobility, while mitigating the risks of data
breaches are critical to quality patient care and the success of anorganization.

W H I T E PA P E R

EFFECTIVE HEALTHCARE DATA BREACH RESPONSE:
HOW NOT TO PANIC WHEN SENSITIVE DATA IS COMPROMISEDLimit damage from a data breach bybuilding your own action plan. Find out how in
the free whitepaper, Effective Healthcare Data
Breach Response.

D OW N LOA D T H E W H I T EPA P ERAB O UT A B S OLUTE
Absolute provides visibility and resilience for every endpoint with self-healing endpoint security and always-connected IT
asset management to protect devices, data, applications and users — on and off the network. Bridging the gap between
security and IT operations, only Absolute gives enterprises visibility they can act on to protect every endpoint, remediate
vulnerabilities, and ensure compliance in the face of insider and external threats. Absolute’s patented Persistence
technology is already embedded in the firmware of PC and mobile devices and trusted by over 12,000 customers
worldwide.
E MA I L :S A L ES :sales@absolute.com

absolute.com/request-info

PH O N E :North America: 1-877-660-2289
EMEA: +44-118-902-2000

WEBS ITE:
absolute.com© 2018 Absolute. All rights reserved. Absolute and Persistence are registered trademarks of Absolute. Self-healing Endpoint Security is a trademark of Absolute. All other trademarks are property of their respective owners.
6-Steps-to-Effective-Healthcare-Data-Breach-Response-Infographic-101018

absolute.com