eHealth Vulnerability Reporting Program: Executive Briefing Document

September 2007 In September 2007, the eHealth Vulnerability Reporting Program released its 2007 Industry Review report assessing the security risks associated with electronic health record (EHR) systems. The study evaluated current industry information security practices, assessed level of risk related to EHR systems, benchmarked healthcare information security practices against other industries, and produced a set of recommendations relating to activities beneficial to protecting information systems in the healthcare industry. They found that vulnerabilities could be identified using standard tools and techniques and that no industry organization definitively has the responsibility to address security issues. The study was supported by various . . .