{"id":6576,"date":"2014-10-23T15:03:16","date_gmt":"2014-10-23T19:03:16","guid":{"rendered":"http:\/\/www.healthit.gov\/buzz-blog\/?p=6576"},"modified":"2026-01-06T16:52:59","modified_gmt":"2026-01-06T16:52:59","slug":"building-culture-health-privacy-security","status":"publish","type":"post","link":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/","title":{"rendered":"Building a Culture of Health IT Privacy and Security"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><i>Cybersecurity is a shared responsibility<\/i>. You\u2019ve probably heard this many times during <a href=\"https:\/\/www.dhs.gov\/national-cyber-security-awareness-month-2014\">National Cybersecurity Awareness Month<\/a>, as well as throughout the year. It\u2019s an important principle \u2014 one that we at ONC firmly believe.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybersecurity can only be achieved in a culture where privacy and security are valued. All of us have a role to play in creating such a culture. We at <a href=\"https:\/\/healthit.gov\/about\/\">ONC<\/a> focus on helping our stakeholders, specifically health care providers in small practices, discover how to promote and adopt a culture of privacy and security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There are three things that can help small provider practices in particular build a privacy and security culture:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>ONC Educational Resources<\/li>\n\n\n\n<li>Risk Assessments<\/li>\n\n\n\n<li>National Institute of Standards and Technology (NIST) Cybersecurity Framework<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-onc-educational-resources\">ONC Educational Resources<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ONC has designed a variety of easy-to-use tools and educational resources specifically for small practice settings. &nbsp;These materials include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A website on <a href=\"https:\/\/healthit.gov\/funding-announcements\/\">Mobile Device<\/a> Privacy and Security, loaded with videos, tips, and other educational materials that has been viewed 27,000 times this year<\/li>\n\n\n\n<li>Videos on <a href=\"https:\/\/healthit.gov\/funding-announcements\/\">Contingency Planning<\/a> and <a href=\"https:\/\/healthit.gov\/\/emergency-ready\">Emergency Preparedness<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/healthit.gov\/funding-announcements\/\">Privacy and Security Training Games<\/a> which have been viewed nearly 90,000 times since launched in September, 2012<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We also collaborate with the <a href=\"https:\/\/www.hhs.gov\/ocr\/office\/index.html\">HHS Office for Civil Rights (OCR)<\/a> \u2014 the office that enforces the Health Information Portability and Accountability Act Security Rule (HIPAA) \u2014 to develop educational resources. These tools help providers better understand and employ effective security for their <a href=\"https:\/\/healthit.gov\/health-it-basics\/faqs\/what-electronic-health-record-ehr\">Electronic Health Records (EHRs)<\/a>, policies, processes, and procedures.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The most recent result of our collaboration is the <a href=\"https:\/\/healthit.gov\/funding-announcements\/\">Security Risk Assessment (SRA) Tool<\/a> (beta), released in March, 2014 and downloaded&nbsp; nearly 40,000 times. The tool guides providers and their office staff through the <a href=\"https:\/\/www.hhs.gov\/ocr\/privacy\/hipaa\/understanding\/srsummary.html\">HIPAA Security Rule standards<\/a> and helps them document their risk mitigation strategies in a thorough, organized fashion.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">More ONC educational resources and materials are available at <a href=\"https:\/\/healthit.gov\/privacy-security\/\">HealthIT.gov<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-risk-assessments\">Risk Assessments<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Conducting a risk assessment is also an important way for a care facility to support a culture of privacy and security. Under HIPAA, a risk assessment is a thorough review and analysis of how a <a href=\"https:\/\/www.hhs.gov\/ocr\/privacy\/hipaa\/understanding\/coveredentities\/index.html\">covered entity<\/a> goes about protecting and securing electronic protected health information (PHI). Risk assessments also include documenting how the organization will mitigate and address risks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Covered entities are required to perform a risk assessment as part of the HIPAA Security Rule requirements. By conducting a risk assessment, providers can uncover technical, physical, and administrative vulnerabilities in their security policies, processes, and systems. When providers address these issues, they can potentially prevent data breaches or other adverse security events.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Small practices conduct risk assessments primarily to stay HIPAA-compliant or to qualify for <a href=\"https:\/\/healthit.gov\/health-it-basics\/how-attain-meaningful-use\">Meaningful Use<\/a> incentive payments. Really, these results are just bonuses. The main goal or \u201cprize\u201d of a risk assessment is having secure PHI and an awareness of the practice\u2019s overall security posture \u2013 making sure that patient information is safe and secure from prying eyes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Visit HealthIT.gov to <a href=\"https:\/\/healthit.gov\/funding-announcements\/\">learn more about Risk Assessment<\/a> and to use ONC&#8217;s free SRA Tool.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-nist-cybersecurity-framework\">NIST Cybersecurity Framework<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The National Institute of Standards and Technology (NIST) has developed a <a href=\"https:\/\/www.nist.gov\/cyberframework\/upload\/cybersecurity-framework-021214.pdf\">Cybersecurity Framework<\/a> that offers a set of standards, best practices, and methods for addressing cyber risk. Its risk management approach aligns with the HIPAA risk assessment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Framework provides a starting point for health care providers to think about the cyber risks relevant to their specific situation. Providers do not need to apply every security measure or control in the Framework; decisions should be based on their specific situation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ONC, NIST and OCR are working closely to develop additional resources to help providers and their offices better understand how the Framework connects with HIPAA Security Rule requirements. ONC is committed to promoting the use of the Framework and emphasizing the relevance of cybersecurity risk to the healthcare environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Viewing educational resources, conducting risk assessments, and adopting the Cybersecurity Framework are about more than gaining HIPAA compliance or Meaningful Use incentives. The end goal is a growing culture of privacy and security, where PHI is protected and secure and cybersecurity is realized. If providers have this mindset, we are headed in a <i>secure<\/i> direction.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Visit <a href=\"https:\/\/healthit.gov\/\/\">HealthIT.gov<\/a> for more information.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity is a shared responsibility. You\u2019ve probably heard this many times during National Cybersecurity Awareness [&hellip;]<\/p>\n","protected":false},"author":619,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_selected_menu":"","_show_breadcrumbs":"true","_blog_show_featured_image":false,"footnotes":""},"categories":[45],"archived-category":[],"featured":[],"topics":[438,425,437,435],"class_list":["post-6576","post","type-post","status-publish","format-standard","hentry","category-privacy-and-security","topics-hipaa-compliance","topics-hit-policy","topics-security","topics-security-privacy"],"acf":{"blog_authors":[{"blog_author_profiles":"198559"},{"blog_author_profiles":"198639"},{"blog_author_profiles":"193015"}],"hp_news_hide":false},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.5 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Cybersecurity achievable in culture where privacy, security are valued<\/title>\n<meta name=\"description\" content=\"Cybersecurity can only be achieved in a culture where privacy and security are valued. All of us have a role to play in creating such a culture.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Building a Culture of Health IT Privacy and Security\" \/>\n<meta property=\"og:description\" content=\"Cybersecurity can only be achieved in a culture where privacy and security are valued. All of us have a role to play in creating such a culture.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/\" \/>\n<meta property=\"og:site_name\" content=\"ONC Blog\" \/>\n<meta property=\"article:published_time\" content=\"2014-10-23T19:03:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-06T16:52:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/ONC.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"sleigh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"sleigh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/\"},\"author\":{\"name\":\"sleigh\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/person\\\/0719592fcc77f0e269f191216da0aae7\"},\"headline\":\"Building a Culture of Health IT Privacy and Security\",\"datePublished\":\"2014-10-23T19:03:16+00:00\",\"dateModified\":\"2026-01-06T16:52:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/\"},\"wordCount\":691,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#organization\"},\"articleSection\":[\"Privacy &amp; Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/\",\"name\":\"Cybersecurity achievable in culture where privacy, security are valued\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#website\"},\"datePublished\":\"2014-10-23T19:03:16+00:00\",\"dateModified\":\"2026-01-06T16:52:59+00:00\",\"description\":\"Cybersecurity can only be achieved in a culture where privacy and security are valued. All of us have a role to play in creating such a culture.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Building a Culture of Health IT Privacy and Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/\",\"name\":\"ONC - Office of the National Coordinator for Health IT\",\"description\":\"Better health enabled by data\",\"publisher\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#organization\"},\"alternateName\":\"ONC\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#organization\",\"name\":\"ONC - Office of the National Coordinator for Health IT\",\"alternateName\":\"ONC\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2025\\\/08\\\/Logo-ONC-Transparent.png\",\"contentUrl\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2025\\\/08\\\/Logo-ONC-Transparent.png\",\"width\":800,\"height\":176,\"caption\":\"ONC - Office of the National Coordinator for Health IT\"},\"image\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/person\\\/0719592fcc77f0e269f191216da0aae7\",\"name\":\"sleigh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"caption\":\"sleigh\"},\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/author\\\/sleigh\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Cybersecurity achievable in culture where privacy, security are valued","description":"Cybersecurity can only be achieved in a culture where privacy and security are valued. All of us have a role to play in creating such a culture.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/","og_locale":"en_US","og_type":"article","og_title":"Building a Culture of Health IT Privacy and Security","og_description":"Cybersecurity can only be achieved in a culture where privacy and security are valued. All of us have a role to play in creating such a culture.","og_url":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/","og_site_name":"ONC Blog","article_published_time":"2014-10-23T19:03:16+00:00","article_modified_time":"2026-01-06T16:52:59+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/ONC.jpg","type":"image\/jpeg"}],"author":"sleigh","twitter_card":"summary_large_image","twitter_misc":{"Written by":"sleigh","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/#article","isPartOf":{"@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/"},"author":{"name":"sleigh","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7"},"headline":"Building a Culture of Health IT Privacy and Security","datePublished":"2014-10-23T19:03:16+00:00","dateModified":"2026-01-06T16:52:59+00:00","mainEntityOfPage":{"@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/"},"wordCount":691,"commentCount":0,"publisher":{"@id":"https:\/\/healthit.gov\/blog\/#organization"},"articleSection":["Privacy &amp; Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/","url":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/","name":"Cybersecurity achievable in culture where privacy, security are valued","isPartOf":{"@id":"https:\/\/healthit.gov\/blog\/#website"},"datePublished":"2014-10-23T19:03:16+00:00","dateModified":"2026-01-06T16:52:59+00:00","description":"Cybersecurity can only be achieved in a culture where privacy and security are valued. All of us have a role to play in creating such a culture.","breadcrumb":{"@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/healthit.gov\/blog\/"},{"@type":"ListItem","position":2,"name":"Building a Culture of Health IT Privacy and Security"}]},{"@type":"WebSite","@id":"https:\/\/healthit.gov\/blog\/#website","url":"https:\/\/healthit.gov\/blog\/","name":"ONC - Office of the National Coordinator for Health IT","description":"Better health enabled by data","publisher":{"@id":"https:\/\/healthit.gov\/blog\/#organization"},"alternateName":"ONC","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/healthit.gov\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/healthit.gov\/blog\/#organization","name":"ONC - Office of the National Coordinator for Health IT","alternateName":"ONC","url":"https:\/\/healthit.gov\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png","contentUrl":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png","width":800,"height":176,"caption":"ONC - Office of the National Coordinator for Health IT"},"image":{"@id":"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7","name":"sleigh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","caption":"sleigh"},"url":"https:\/\/healthit.gov\/blog\/author\/sleigh\/"}]}},"parsely":{"version":"1.1.0","canonical_url":"https:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/","meta":{"@context":"https:\/\/schema.org","@type":"NewsArticle","headline":"Building a Culture of Health IT Privacy and Security","url":"http:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/","mainEntityOfPage":{"@type":"WebPage","@id":"http:\/\/healthit.gov\/blog\/privacy-and-security\/building-culture-health-privacy-security\/"},"thumbnailUrl":"","image":{"@type":"ImageObject","url":""},"articleSection":"Privacy &amp; Security","author":[{"@type":"Person","name":"sleigh"}],"creator":["sleigh"],"publisher":{"@type":"Organization","name":"ONC Blog","logo":""},"keywords":[],"dateCreated":"2014-10-23T19:03:16Z","datePublished":"2014-10-23T19:03:16Z","dateModified":"2026-01-06T16:52:59Z"},"rendered":"<script type=\"application\/ld+json\" class=\"wp-parsely-metadata\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"NewsArticle\",\"headline\":\"Building a Culture of Health IT Privacy and Security\",\"url\":\"http:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"http:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/building-culture-health-privacy-security\\\/\"},\"thumbnailUrl\":\"\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"\"},\"articleSection\":\"Privacy &amp; Security\",\"author\":[{\"@type\":\"Person\",\"name\":\"sleigh\"}],\"creator\":[\"sleigh\"],\"publisher\":{\"@type\":\"Organization\",\"name\":\"ONC Blog\",\"logo\":\"\"},\"keywords\":[],\"dateCreated\":\"2014-10-23T19:03:16Z\",\"datePublished\":\"2014-10-23T19:03:16Z\",\"dateModified\":\"2026-01-06T16:52:59Z\"}<\/script>","tracker_url":"https:\/\/cdn.parsely.com\/keys\/healthit.gov\/p.js"},"_links":{"self":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/6576","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/users\/619"}],"replies":[{"embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/comments?post=6576"}],"version-history":[{"count":5,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/6576\/revisions"}],"predecessor-version":[{"id":176262,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/6576\/revisions\/176262"}],"wp:attachment":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/media?parent=6576"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/categories?post=6576"},{"taxonomy":"archived-category","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/archived-category?post=6576"},{"taxonomy":"featured","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/featured?post=6576"},{"taxonomy":"topics","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/topics?post=6576"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}