The Nevada Donor Network is using authentication technology to help verify the identities of organ donors, says Ken Richardson, executive director.

It's one thing to have solid enterprise risk management practices, but quite another to articulate their value to the greater organization.

The level of application security threats is rising, but the level of response is not. "That's a serious disconnect," says Jeff Williams, chair of the OWASP Foundation.

Physician group practices installing their first electronic health records systems need to "create a culture that values privacy and security," EHR expert Margret Amatayakul says.

Hospitals and clinics need to take a methodical approach to privacy and security as they prepare to qualify for electronic health records incentive payments from Medicare and Medicaid under the HITECH Act, security adviser Phyllis Patrick says.

This week's top news and views: Massive Health Insurance Fraud Alleged; FTC: No Major PHR Breaches So Far; Claims Database Raises Privacy Concerns.

As healthcare organizations make broader use of wireless networks and devices, they must develop an aggressive risk management plan to address security threats, says security expert Rebecca Herold.

"Signatures are not going to be the way of the future because we don't have time to put a name or a pattern on enemy behaviors and pass it out and block it," says Phyllis Schneck, McAfee chief technology officer/public sector.

When it comes to business continuity and disaster recovery planning, it isn't the cause of the disaster that's the concern - it's the potentially devastating effects.

This week's top news and views: Building Public Trust in Secure EHRs; Encryption's Role in Risk Management. And don't miss our audio week-in-review podcast by Editorial Director Tom Field.