The monthly meeting of the Security Practitioners' Forum (Security Users' Group)

Topic: Privacy and Healthcare

Update & Assessment

Presenter: Donald Hoffman

Privacy and Protected Health Information (PHI) in the Health Care and Services Industry has moved to the fore-front of Cyber Security. Has the Health Insurance Portability and Accountability Act of 1996, (HIPAA) accomplished what it has set out to do? Some would say yes, but many would claim that it has become another paper nightmare for organizations to manage.

About the Speaker:
Donald Hoffman is currently the Director of IT Security at one of the largest Health Care facilities in the west coast. Catholic Healthcare West (CHW) is responsible for more than 40 hospitals throughout California, Arizona, and Nevada. Don, a retired Chief Master Sergeant of the Air Force, was responsible for the Information Security Management of all Air Reserve Bases located throughout the United States from 1990 through his retirement in 1997. During his tenure as Chief, Information Protection Branch, Robins AFB, Georgia, Don assisted with developing and managing the security protection efforts of all Air Force Reserve Bases which migrated from the Secure Internet Protocol Network (SIPRNET) to the NoN-Secure Internet Protocol Network (NIPRNET). This basically was the time (1990’s) that Department of Defense (DOD) started introducing government and military entities to the Internet. Since his retirement from the Air Force, Don has been the former Chief Security Officer (CSO) of a large Insurance company in New York and has held various Senior Level Security positions with numerous Financial and Healthcare organizations throughout the east coast. He is a Certified Information Security Manager (CISM) and is currently studying for level 5 for his certification in Homeland Security. Don was the Regional Director of Homeland Security for the North East Region of New York .He has a Masters Degree in Information Systems from the Community College of the Air Force and will complete his studies next year for a Bachelor of Science degree in Security Management, with an emphasis in computer forensics, from the American Military University. He recently returned to full time status with CHW after being an Independent Security Consultant for five years.

The Arizona Security Practitioner's Forum is an organic group for InfoSEC Professionals.

Generally, our purpose is:

• To facilitate knowledge transfer, networking and growth within the InfoSEC community.
• To provide a forum for IT professionals to grow InfoSEC awareness and competencies.