Clinical-Security

Company Overview

Clinical Security, LLC was born from the enterprising minds of security professionals who have worked in every facet of Information Security from data loss protection, managing fully functioning Incident Handling Teams (SIRTs) to investigating digital crimes like large-scale data breaches and internal fraud and negligence. Our consultants’ broad experiences range from a professor in Modeling/Simulation and Business Intelligence to a expert witnesses in forensics and data security professionals with Top Secret clearance. They, like the rest of our talented staff, exhibit the key features Clinical Security embodies when it comes to assessing and defending your data assets or remediating risks to your organization. Clinical Security responds to data breaches with energy sector customers, financial and higher education institutions, defense contractors, and healthcare organizations. Time after time, what we discover is that an ounce of prevention is worth a pound of cure. These costly data breaches could have been avoided using sound industry standard guiding principles of vulnerability and risk management. Our focus is on the defense in layers model - eliminating opportunities for data breaches to occur and responding appropriately to Information Security Incidents. Clinical Security aids healthcare organizations with the strategic path it needs to institute a mature risk management posture, from reducing vulnerabilities on IT-managed systems to educating medical administrators and care providers in end-user policies in protecting patient records.

Using the defense in layer model, in addition to reducing the possibility of a breach, Clinical Security responds to data breaches and other Information Security Incidents to contain damage, preserve and analyze forensic evidence, and remediate the root cause.. Several of our consultants are vetted with government security clearances and qualified to testify as expert witnesses in any state in the U.S. Our healthcare clients have a primary area of expertise—patient care; but healthcare is Clinical Security’s patient. Using a “one size does not fit all” mentality we have taken great care to identify and provide the right deliverables for large-scale hospital groups and single-office care providers. Clinical Security’s services and products are intentionally scalable so all organizations, at all investment levels, may benefit from its services and products.

Clinical Security acts as a Risk Management advocate. We help draft compliance standards and perform audits to identify gaps in that compliance. We also deliver an organization’s mature risk posture through vulnerability management, information security incident response, end-user and IT training, and sponsor healthcare vendor security.

Clinical Security serves as a trusted advisor during a suspected data security event. From educating client staff to legal documentation of data security breaches, Clinical Security plays an integral part in limiting risk for healthcare organizations from all types Information Security Incidents. Clinical Security conducts data breach education at all levels of an organization and helps triage security events, manage incidents, conduct forensics analysis, and play a client-advocacy roll and expert testimony when a compliance authority investigates a breach. Our clients hold a vast amount of private patient data and internal records; Clinical Security holds the right tools and industry professionals to reinforce the barriers that surround that data as well as the business processes that create, manage, and utilize that data. If a healthcare organization has experienced a data breach or is interested in reducing the likelihood of a data breach, they do not need to look any further than our name: Clinical Security.

Staff Biographies

– Click on image for larger view

The Clinical-Security Approach

In most hospitals Information Assurance is viewed as a necessary evil; and secondary to patient care. We believe that IA is one facet of the patient care experience. We help you to determine process centric and performance-driven goals; while also considering HIPAA security implications and the human factor concerns of healthcare. We are security coaches and advocates, focused on helping to you receive the greatest value from your technology.

We believe that security-focused healthcare must first be a quality-focused business. Your reputation, revenue and most importantly, your patients, is at risk. To address data security you must make an unfettered examination of how you work; and how you protect patient health information today. The law-enforcement and Information Security professionals of Clinical Security make a difference in the organizational mindset and patient care quality of every hospital we serve.