Security Inside Out Edition
Oracle Corp
January 2012 Stay Connected: Oracle Database on TwitterFacebookBlog  Oracle Identity Management on TwitterOracle Identity Management on FacebookBlog    
Back to the main page
Healthcare Organizations Find Help in Oracle Security Solutions

The constantly evolving healthcare industry is challenged with managing and protecting electronic healthcare records (EHRs) that contain sensitive personally identifiable information. Many healthcare organizations are turning to Oracle application and data security solutions to help protect this most sensitive information.

National Marrow Donor Program Secures Life-Saving Data with Oracle Security Solutions
With more than 9 million donors in its Be the Match® registry, the National Marrow Donor Program (NMDP) collects and manages a vast amount of sensitive medical information. This registry helps to save lives, but keeping sensitive data secure also represents a major challenge.

That's why NMDP—like so many healthcare organizations—has turned to Oracle for a comprehensive set of database security solutions.

Securing Data, Saving Lives
Since its inception more than 30 years ago, NMDP has enabled more than 43,000 transplants for patients suffering from diseases such as lymphoma and leukemia.

These days, this mission requires some 60,000 to 80,000 global transactions with network members each day. As the amount of sensitive data continues to grow, NMDP increased its defensive layers to ensure data privacy, protect against insider threats, and enable regulatory compliance. In particular, the NMDP relies on

Oracle Advanced Security: Secure data at rest, in motion, and on database backups using transparent data encryption.
Oracle Database Vault: Enable privileged user and multifactor access control for all database users.
Oracle Data Masking Pack: Enable irreversible de-identification of production data used in nonproduction development and testing environments.

Most importantly, NMPD turned to Oracle for "a comprehensive, defense-in-depth strategy that does not require any changes to existing applications," says Kyle Nelson, director of IT infrastructure for NMDP.

Securing Electronic Health Records with Oracle Identity Management
On an even larger scale, electronic healthcare initiatives—including EHRs—promise better patient outcomes at significantly lower costs. Unfortunately, concerns about patient privacy and unauthorized access (including VIP cases) have deterred wider adoption.

However, leading healthcare organizations such as Kaiser Permanente and Emdeon are helping pave the way to the future, thanks in part to Oracle Identity Management solutions. Solutions key in securing sensitive healthcare information include

Oracle Security Governor: Safeguards data directly at the application level with both retrospective detection and proactive prevention against breaches.
Oracle Identity Manager: Prevents unauthorized access of EHRs—even when dealing with multiple health providers and entities—with automated user provisioning.
Oracle Identity Analytics: Enforces SOX compliance, ensures preventative monitoring, and automates reviews and reporting.
Oracle Access Management Suite Plus: Ensures proper Web access with single sign-on, identity federation, risk-based authentication, proactive fraud prevention, information rights management, and fine-grained authorization. Authorized healthcare users can log on securely anywhere, anytime using a single sign-on, while ensuring a clean cache when they are done.

For more information on how Oracle Identity Management can help healthcare organizations meet their security and compliance goals, tune into the on-demand Webcast featuring experts from Kaiser Permanente, PricewaterhouseCoopers, and Oracle.

Back to Top
Oracle Information InDepth newsletters bring targeted news, articles, customer stories, and special offers to business people who want to find out how to streamline enterprise information management, measure results, improve business processes, and communicate a single truth to their constituents.

Please send questions or comments to

For answers to questions about subscribing, unsubscribing, and managing your Oracle e-mail communications preferences, please see the Oracle E-Mail Communications page.

Copyright © 2012, Oracle Corporation and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

This document is provided for information purposes only, and the contents hereof are subject to change without notice. This document is not warranted to be error-free, nor is it subject to any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations are formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission.


Oracle Corporation - Worldwide Headquarters, 500 Oracle Parkway, OPL - E-mail Services, Redwood Shores, CA 94065, United States

Create or update your profile to receive customized e-mail about Oracle products and services.

If you do not wish to receive any further electronic marketing communications from Oracle you can Opt-Out completely, please note you will no longer receive newsletters and product information you may have subscribed to.