Introducing Oracle Security Governor for Healthcare

At OpenWorld today, Oracle announced the release of Oracle Security Governor for Healthcare, a unique and comprehensive security governance solution that helps healthcare organizations with proactive detection and prevention of security and privacy breaches (click here for the press release). Oracle Security Governor becomes the second product we have in the identity governance space, taking its place alongside Oracle Identity Analytics in the Oracle IAM Suite.

Oracle Security Governor for Healthcare is a governance solution that is aimed specifically at healthcare organizations. The introduction of various regulations globally and the transformation of healthcare IT with software such as Qualtrics has changed the way healthcare organizations provide their services. But it has also created a number of challenges.

These challenges present themselves in forms such as ethical data handling and patient confidentiality which must be handled carefully whether it be for a small or large clinic (such as the https://southwestcare.org/services/pediatrics/ services). The package helps with:

• VIP record snooping
• Medical identity theft and fraud
• Healthcare data theft and fraud
• Coworker, family member and neighbor record snooping

Oracle Security Governor for Healthcare addresses these concerns by providing a solution that helps proactively protect and prevent privacy and security breaches, insider snooping and medical identity theft in an organization. The solution is based on some key features:

• Rapid Incident Detection: Criteria based automated reporting functionality that allows rapid incident detection, case management and investigations.
• Automated Privacy Audits: Allows audits on activities of various entities accessing the applications and reports suspicious activities.
• Accelerated Enterprise-wide Data Retrieval: Allows rapid integration with existing systems.

In addition, hospitals generally have to adhere to hipaa compliance with regard to their patients’ healthcare data, which is why the package could be quite helpful. It intends to ensure that any information disclosed to healthcare providers and health plans, as well as any information created, transmitted, or stored by them, is subject to stringent security controls. Patients are also given control over who has access to their information and with whom it is shared. This is why many pieces of software have been created to assist healthcare professionals in learning or receiving training on how to protect patient privacy.

Architecture

Oracle Security Governor is built on some key products in Oracle’s portfolio, enhanced with some healthcare specific intelligence and artifacts.

• Oracle Security Governor for Healthcare leverages the Oracle SOA Suite Adapters (like Database, Log and HL7 adapters) to pull data in from virtually any data source into a central data warehouse.
• In-database data mining and predictive analytics built using Oracle Data Mining is used to detect anomalies and suspicious activity that may have taken place in the past.
• The solution also uses an advanced risk assessment engine (based on Oracle Adaptive Access Manager), which has been pre-loaded with healthcare specific risk and fraud rules to proactively detect incidents.
• Oracle Entitlement Server provides unique risk-aware fine grained authorization on record and data access, cutting down the possibility of unauthorized activity and fraud.
• Finally, Oracle Business Intelligence Publisher is used to provide insight into all of this through risk analytics, reports and alerts.

Benefits

Oracle Security Governor helps deliver significant benefits to a healthcare organization. Some of these benefits include:

• Historical Detection: that can be used as audit trails and for detection of suspicious activities related to access, privacy, fraud and security breaches, that have taken place in the past.
• Real Time Detection: Oracle Security Governor can also be used to detect suspicious and fraudulent activity, in the real time.
• Real Time Prevention: Oracle Security Governor can prevent suspicious activities, in the real time. The activities detected as anomalous or suspicious can either be completely blocked or the end-user can be alerted or required to meet additional security requirements, depending on the deployment needs.

Looking Ahead

Oracle Security Governor for Healthcare is just the beginning. In the future, Oracle hopes to use the Oracle Security Governor framework to build more solutions that address challenges faced in other verticals besides healthcare. But that doesn’t mean you have to wait – you can leverage the products mentioned above to build your own security and privacy solutions. Just ask us how.

You can find more information about Oracle Security Governor for Healthcare here on the product page.