Following the news about theft of NFL former players’ medical records, security experts from VASCO and Balabit commented below.
Michael Magrath, current Chairman, Director of Healthcare Business at VASCO Data Security:
“Laptop thefts are common place and one of the most common entries (310 incidents) on the HHS’ Office of Civil Rights portal listing Breaches Affecting 500 or More Individuals. Encryption is one of the basic requirements to securing a laptop, yet organization continue to gamble without it and innocent victims can face a lifetime of identity theft and medical identity theft.
“Assuming the laptop was Windows based, security can be enhanced by replacing the static Windows password with two-factor authentication in the form of a one-time password. Without the authenticator to generate the one-time password, gaining entry to the laptop will be extremely difficult. By combining encryption and strong authentication to gain entry into the laptop the players and prospects protected health information would not be at risk, all because organizations and members wish to avoid few moments of inconvenience.”
* NOTE: HIMSS is the Healthcare Information Management Systems Society, the global non-profit leading efforts to optimize health engagements and care outcomes using information technology.
Matthew Ravden, Chief Marketing Officer and VP at Balabit:
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.