The Internet is one of the most cost-effective and efficient ways for health data organizations to collect, aggregate and publish health information, interact with health data suppliers and users, and establish an e-commerce business presence.
However, if the organization is not rigorous in securely configuring and operating a public Web site, it leaves itself vulnerable to a variety of information security problems that affect the integrity, availability and confidentiality of the health information.
The purpose of this document is to assist health data organizations develop and adopt best practices and policies that ensure that their public Web sites are a safe and secure environment for the collection, use and dissemination of health information.
