We believe healthcare organizations should restructure the information security function to report directly to the board.

FORBES: Why Healthcare Data Breaches Are a C-Suite Concern

That said, the going forward approach then is to have a process for reporting seemingly disparate small security issues, and having a person to report them to (in most organizations a chief information security officer or CISO) who can put them all together in the context of a larger attack.

FORBES: Discussing Gawker's Breach With Founder Nick Denton

And we must hunt down and report any breaches in information security.

FORBES: New Privacy Rules May Distract Doctors From Patient Care

From there, in fact, maybe even a greater piece of information is the credit report, because the credit report, obviously, not only gives a Social Security number and personal information about the individual, but it also goes on to indicate where the person has their holdings, whether they have home equity loans, and effectively, they can obtain driver's licenses from that and then they can get open bank accounts.

NPR: Understanding Identity Theft

The memorandum instructs the Director of the Information Security Oversight Office to publish a periodic status report on agency implementation of the Order.

WHITEHOUSE: Share This Post

The report The Financial Impact of Breached Protected Health Information: A Business Case for Enhanced PHI Security enables health care organizations to make a business case for appropriate investments to better protect PHI.

FORBES: Can Health Care Orgs Maintain Trust With Electronic Records?

"Vital information has already been removed from the report by the de Silva review team prior to checking by security officials, MOD personnel and the PSNI, " she said.

BBC: Pat Finucane murder: Vetting 'sanitises' de Silva report