Data Storyteller

It's time to reconsider your strategy if you still treat cyber risk as an annual project or initiative. Having a thorough ongoing program in place means that even in the worst-case scenario, you'll be ready to demonstrate that you did what was reasonable and appropriate to protect your systems and patient data. Nothing can guarantee that a cyberattack won't become a breach. Health Centers are a domain with a high potential for data breaches, and the risk continues to grow as health centers use new tools and the introduction of artificial intelligence (AI). As a result, it is crucial for health center leadership to adopt breach prevention strategies across their entire organization, as opposed to relegating it to the IT department.

To support health centers in their cybersecurity strategy and implementation, the HITEQ Center is offering a free learning collaborative -- Improving Health Center Cybersecurity: Risk Assessment, Breach Defense, Mitigation, and Response. This learning collaborative will involve four structured virtual learning sessions. During the series participants will engage with subject matter experts and their colleagues in peer-to-peer learning and discussion. Topics will include: health center breach mitigation tactics, operationalizing cybersecurity to better mitigate risks, cybersecurity implications of generative artificial intelligence in health centers, and incident response planning from a cybersecurity perspective.

Session 1: Identifying and Assessing Cybersecurity Risks at Your Health Center
In the kick-off to our cybersecurity learning collaborative, we sought to build knowledge and increase Health Centers' capacity to effectively prepare for and defend against the current onslaught of malware and ransomware attacks being levied against them. Participants looked at ways to build cybersecurity infrastructure through risk management frameworks and strategic risk assessment, with a focus on protecting information across the whole organization.
 

Is your health center currently in the process of considering, implementing, or revamping a social needs screening program within your EHR or health IT system? Join this learning collaborative to learn about health center promising practices and key considerations to support the successful collection, monitoring, and addressing of social needs data. During the series, participants will explore the levels of maturity in the social needs screening implementation process. The levels of maturity include: 

• Level 1: Coming to Consensus
• Level 2: Implementing a Social Needs Screening Tool
• Level 3: Responding to Positive Screens
• Level 4: Monitoring and Using Data

Participants will gain information on concrete strategies and IT solutions that will help to improve internal systems, such as EHR utilization and care team workflows, and increase their capacity to advance individual and population-level health.  The HITEQ Center has partnered with the Louisiana Primary Care Association to design this series. Louisiana-based health centers will be showcased throughout the series to share their experiences with social needs screening, including successes, challenges, and lessons learned.

This learning collaborative by the HITEQ Center allowed participants to learn about health center promising practices and key considerations to support the successful collection, monitoring, and addressing of social needs data. During the series participants explored the levels of maturity in the social needs screening implementation process. Participants gained information on concrete strategies and IT solutions to help improve internal systems, such as EHR utilization and care team workflows, and increase their capacity to advance individual and population-level health.  Health center exemplars were also showcased.

Are you capturing information like immigration or refugee status, intimate partner violence, human trafficking, risk of acquiring HIV through sexual contact or substance use disorder, or other information that brings up questions about how to document or code while respecting the patient’s privacy?

This health center learning collaborative series will present health center case examples that explore the privacy and data sharing considerations of EHR documentation of sensitive patient information, such as social history and social risk, and encourage participants to discuss the implications for health centers and their patients. 

Are you capturing information like immigration or refugee status, intimate partner violence, human trafficking, risk of acquiring HIV through sexual contact or substance use disorder, or other information that brings up questions about how to document or code while respecting the patient’s privacy?

This health center learning collaborative series presented health center case examples that explore the privacy and data sharing considerations of EHR documentation of sensitive patient information, such as social history and social risk, and encourage participants to discuss the implications for health centers and their patients.