Georgia Killcrece: It's how you manage a security incident that counts.

The first in a series of new interviews with the real victims of identity theft. Hear their stories, their struggles and their lessons learned.

Healthcare organizations need to improve the methods they use to objectively assess the severity of a security incident and whether it should be reported, says David Parks, a privacy officer and attorney.

When it comes to managing relationships with business associates to help with HITECH Act compliance, healthcare organizations could learn some lessons from the banking industry.