ChaptersEventsBlog
Register now for NHIcon 2026, a half-day online event, to learn what the future of AI security requires.

Working Group

Health Information Management

The main objective of this working group is to provide direct influence on how health information service providers deliver secure cloud solutions (services, transport, applications and storage) to their clients.
View Current Projects
Health Information Management Working Group Charter 2024
Health Information Management Working Group Charter 2024

Download

Health Information Management
Working Group Overview

Our working group meets twice a month on Wednesdays at 11:30am PT. We welcome anyone who would like to join, even if you would like to just listen-in on your first call. 

The goal of this group is to provide direct influence on how health information service providers deliver secure cloud solutions (services, transport, applications and storage) to their clients.


What do we discuss?

During these meetings we typically discuss changes in the industry that relate to health information service providers, and collaborate on projects the group is currently working on.


This working group meets every other week. 

Working Group Leadership

Dr. Jim Angle
Dr. Jim Angle

Dr. Jim Angle

Jim has dedicated hundreds of hours to CSA and was instrumental in reviving CSA’s Health Information Management working group. In doing so, he drafted the group’s first charter and went on to become its co-chair. In this role, he authored three papers — Managing the Risk for Medical Devices Connected to the Cloud, Telehealth in the ...

Read more

Publications in ReviewOpen Until
SSCF Implementation GuidelinesDec 25, 2025
SSCF-CAIQDec 25, 2025
DLP and DSPM inHealthcare: AI-EnhancedSecurity and PrivacyDec 26, 2025
AICM to AIUC-1 MappingDec 28, 2025
View all
Who can join?

Anyone can join a working group, whether you have years of experience or want to just participate as a fly on the wall.

What is the time commitment?

The time commitment for this group varies depending on the project. You can spend a 15 minutes helping review a publication that's nearly finished or help author a publication from start to finish.

Virtual Meetings

Attend our next meeting. You can just listen in to decide if this group is a good for you or you can choose to actively participate. During these calls we discuss current projects, and well as share ideas for new projects. This is a good way to meet the other members of the group. You can view all research meetings here.

Dec

31

Wed, December 31, 11:30am - 12:30pm PST
CSA Health Information Management Working Group Meeting
See details
Health Information Management Working Group Meeting

https://zoom.us/j/264417098?pwd=S09CcXR3NDc1YTRKQUc3VkN3Yk5kUT09

Agenda
  • CSA events, updates, research publications
  • HIM Circle discussions, recent healthcare cybersecurity news
  • Review in development and proposed HIM publications
  • Plan next steps 
Publications in Development & Proposed:

Jan

28

Wed, January 28, 11:30am - 12:30pm PST
CSA Health Information Management Working Group Meeting
See details
Health Information Management Working Group Meeting

https://zoom.us/j/264417098?pwd=S09CcXR3NDc1YTRKQUc3VkN3Yk5kUT09

Agenda
  • CSA events, updates, research publications
  • HIM Circle discussions, recent healthcare cybersecurity news
  • Review in development and proposed HIM publications
  • Plan next steps 
Publications in Development & Proposed:

Open Peer Reviews

Peer reviews allow security professionals from around the world to provide feedback on CSA research before it is published.

Learn how to participate in a peer review here.

SSCF Implementation Guidelines

Open Until: 12/25/2025

The Cloud Security Alliance (CSA), in collaboration with the SaaS Security Capability Framework (SSCF) Working Group, is pl...

SSCF-CAIQ

Open Until: 12/25/2025

The Cloud Security Alliance (CSA), in collaboration with the SaaS Security Capability Framework (SSCF) Working Group, is pl...

DLP and DSPM inHealthcare: AI-EnhancedSecurity and Privacy

Open Until: 12/26/2025

Healthcare organizations face growing risks of data exposure as they adopt cloud platforms, AI tools, and connected technol...

AICM to AIUC-1 Mapping

Open Until: 12/28/2025

This document is an addendum to the 'AICM' that contains controls mapping between the CSA's AI Controls Matrix v1.0 and 'AI...