Risk Management
Healthcare organizations routinely encounter risks that jeopardize the health and well being of patients as well as the financial status of the organization.
Risks arising from clinical operations and medical malpractice are generally well recognized, as are risks associated with billing errors, fraud and abuse claims, and workers compensation. Untill recently, the risks associated with data management and information technology have been overlooked or written off as merely IT problem.
Healthcare organizations that overlook the impact of data management and IT risk often fail to recognize the potential impact of system disruption, data corruption, accountability errors, and poor data quality on the organization’s workflows and healthcare business processes. This situation results, in part, from an IT security organization that imperfectly understands the healthcare business functions or the ways in which IT errors impact core healthcare operations. The disconnect is exacerbated when the IT manager focuses on the security concerns of confidentiality, integrity, and availability while avoiding broader issues of information effectiveness, efficiency, reliability and compliance. The IT risk manager's toolset seems meager when applied in an IT centric, bottom-up, CISSP Book of Knowledge approach. The cost of treating IT risk solely from an IT perspective leads to an imbalance in the risk identification and analysis results. IT risk exposurs is overestimated while business impact is underestimated.
The Tunitas Group risk management approach is top-down, driven by our indepth understanding of healthcare business processes and our ability to engage healthcare business managers and IT staff in risk management discussions. Contact us for a Tunitas Group IT risk management fact sheet:
Tunitas Group Expertise
Tunitas Group consultants have considerable training and experience in the identification, analysis and treatment of IT-related, healthcare business risk and are certified in IT and Healthcare Risk Management domains, including ISACA CGEIT, CISA, CISSP, CPHRM.