By the EHRA Privacy & Security Workgroup
For many C level executives in a healthcare organization, cybersecurity equates to risk of a cyberattack that results in a Health Insurance Portability and Accountability Act (HIPAA) breach and fine.
The bigger risk posed by a cyberattack, however, is to patient safety. If you get anything from this blog post, it should be this: Cybersecurity incidents affect more than HIPAA compliance, and should be treated as a patient safety risk.
By categorizing cyberattacks as a patient safety risk, it escalates the importance of cybersecurity as more than mitigating a potential HIPAA fine.



For healthcare providers and their patients, interoperability holds the promise to substantially improve quality and reduce costs, while enabling coordination of care and engagement of patients with their caregivers. As ONC’s annual
Beginning in 2012, and continuing as I transitioned from one EHR company to another, I was a passive member of 