Kronstadter Str. 4
81677 München, de
+44 (20) 7183-2834
Varonis says Australian hospital patient record manipulation scandal highlights need for better data governance
Data manipulation, says David Gibson, vice president of strategy with the data governance specialist, has been going on for far longer than computers have been around - it's just that computers have made this type of fraud a lot easier, he explained.
"This Australian case is interesting from a governance perspective, as the manager concerned has admitted his department tweaked around six per cent of the database in order to make the patient wait times - and hospital stays - appear shorter than they actually were," he said.
"You could argue that, since patient care and welfare was not affected, this was not a major issue, but as a growing number of healthcare organisations operate on the basic of efficiency targets, there are obvious budgetary issues involved here," he added.
Gibson went on to say that the $64,000 question that healthcare managers in other jurisdictions of the world need to ask is whether this kind of data manipulation could be happening in their organisations - and the answer, he says, is that without strong data governance audit systems in place, they cannot be sure.
The reality, the Varonis VP of strategy notes, is that there are clear financial and management consequences from data manipulation. And this, says Gibson, is where effective data governance can step in and assist. By automating the security of structured and unstructured data - up to 80 per cent of data falls into the unstructured category, Varonis has found - managers can discover whether data manipulation is taking place.
David Gibson recommends the following steps for making unstructured data more secure:
- Reduce read access to critical data to only those who require it
- Reduce modify access even further - as few people as possible should be able to make changes to these files
- Changes to critical data should be monitored and then reviewed for accuracy by at least one other individual- even performing random checks on a subset of changes can make a difference.
For structured data, Gibson explains, there are often options to restrict and audit field-level manipulation with automation to prevent or catch potential issues, but the same manual process described above may be used.
"Had this type of process been in place at this Canberra hospital, then the data manipulation by this manager would have been discouraged, caught, or prevented. Effective data governance really does work."
For more on Varonis Systems: http://www.varonis.com
For more on the Canberra Hospital patient data records scandal: http://bit.ly/P7tPed
The use of information published here for personal information and editorial processing is generally free of charge. Please clarify any copyright issues with the stated publisher before further use. In the event of publication, please send a specimen copy to email@example.com.