HIPAA safeguards, access control, encryption, risk management, and the practices that protect patient information. This page lists all 103 Cybersecurity and Privacy terms in the HIMSS Word of The Day series.
Start here
- Access Control
- Audit Trail
- Authentication
- BA (Business Associate)
- Contingency Plan
- Cybersecurity
- Encryption
- ePHI (Electronic Protected Health Information)
- Health Insurance Portability and Accountability Act (HIPAA)
- HIPAA Security Rule
- Protected Health Information (PHI)
- Risk Assessment
- Risk Management
All Cybersecurity and Privacy terms
- AAA (Authentication, Authorization, and Accounting)
- ABAC (Attribute-Based Access Control)
- Acceptable Risk
- Access Control
- Accountability (Data Accountability)
- Accounting of Disclosures
- ACL (Access Control List)
- Administrative Safeguards (HIPAA)
- Anonymization
- Anti-Virus Software
- APT (Advanced Persistent Threat)
- Attack Vectors
- Audit Trail
- AUP (Acceptable Use Policy)
- Authentication
- Authorization (Access Control)
- BA (Business Associate)
- BEC (Business Email Compromise)
- Biometric Identifier
- Biometrics
- Breach (HIPAA Breach of Security)
- Bring Your Own Device (BYOD)
- Brute Force Attack
- Business Associate Agreement (BAA)
- CIA Triad (Confidentiality, Integrity, Availability)
- CISO (Chief Information Security Officer)
- Consent (HIPAA)
- Consent Directive
- Contingency Plan
- Cyberattack
- Cybersecurity
- Data De-identification
- Data Perturbation
- De-Identified Health Information
- Denial-of-Service Attack
- Digital Signature
- DS4P (Data Segmentation for Privacy)
- Electronic Audit Trail
- Emergency Access
- Encryption
- ePHI (Electronic Protected Health Information)
- Firewall
- General Data Protection Regulation (GDPR)
- Hash Function
- Health Information Privacy
- Health Information Security
- Health Insurance Portability and Accountability Act (HIPAA)
- Healthcare Data Encryption
- HIPAA Privacy Rule
- HIPAA Security Rule
- Identity and Access Management (IAM)
- Identity Proofing
- Incident
- Intrusion Detection
- Kerberos
- Least Privilege
- Limited Data Set
- Log Management
- Malware
- Minimum Necessary
- Nonrepudiation
- Penetration (Penetration Testing)
- Phishing
- Physical Safeguards
- Privacy Impact Assessment (PIA)
- Privacy Officer
- Protected Health Information (PHI)
- Psychotherapy Notes
- Public Key Infrastructure (PKI)
- Quantum Computing
- Ransomware
- Risk Analysis
- Risk Assessment
- Risk Management
- Role-Based Access Control (RBAC)
- S/MIME (Secure Multipurpose Internet Mail Extensions)
- SAML (Security Assertion Markup Language)
- Sanitization
- Security Administrator
- Security Audit
- Security Control Assessment
- Security Incident
- Smartcard
- Social Engineering
- SSH (Secure Shell)
- SSL (Secure Socket Layer)
- Symmetric-Key Cryptography
- Threat
- TKIP (Temporal Key Integrity Protocol)
- Transport Layer Security (TLS)
- Trojan Horse
- Virtual Private Network (VPN)
- Virus
- Vishing (Voice or VoIP Phishing)
- Voice ID (Voice Authentication)
- Vulnerability
- Vulnerability Assessment
- WEP (Wired Equivalent Privacy)
- Whitelist
- Wi-Fi Protected Access (WPA)
- Zero Trust (ZT)
- Zero-Day Attack
- Zero-Day Threat
Further reading outside this series: HHS’s Health Information Privacy pages (HIPAA) and the NIST Cybersecurity Framework.
Back to all topics or the A–Z glossary.