The ways clinical, device, pharmacy, and business systems get fooled, in plain language, and what DOR does about each one.
Orders, results, images, and the chart they all land in.
HC-C.1
A result can be changed between the analyzer and the chart, and the changed value looks no different from a legitimate one.
DOR proves each result is unchanged from the instrument that produced it.
HC-C.2
An order can be inserted into a system so it appears to come from a known clinician.
DOR confirms each order came from the clinician and system it names before it is acted on.
HC-C.3
Images can be edited, generated, or attached to the wrong patient on their way to the reading room.
DOR keeps each image tied to the patient and scanner it came from.
HC-C.4
During and after an outage, records are re-entered and can be backdated or changed.
DOR locks in what was verified and when, so the timeline holds.
Monitors, pumps, and every connected device near a patient.
HC-B.1
Readings can be changed on their way from the bedside to the central station, showing normal values while a patient declines.
DOR proves each reading is unchanged from the device.
HC-B.2
Anyone who reaches the device network can send commands to connected equipment.
DOR holds a remote command it cannot prove came from an authorized source.
HC-B.3
Firmware and updates can carry harmful code into connected devices.
DOR checks them before they install and keeps checking what runs.
HC-B.4
Devices can arrive with backdoors or undocumented connections.
DOR watches devices while they run and confirms each is the registered one, so unapproved behavior is flagged and recorded.
Prescriptions, controlled substances, and the drugs moving toward the patient.
HC-P.1
An electronic prescription can be forged, or its drug, dose, or quantity changed in transit.
DOR confirms who wrote the order and that nothing in it changed.
HC-P.2
Tracing records can be altered to hide a counterfeit or diverted product.
DOR keeps every transaction record provable from one trading partner to the next.
The help desk, the phone line, the video visit, and the record room.
HC-A.1
Callers posing as clinicians or executives push the help desk to reset passwords or enroll new login devices.
DOR confirms the requester before access changes.
HC-A.2
A cloned voice can sound exactly like a physician or an executive asking for access or money.
DOR checks the live call and flags a voice it cannot verify.
HC-A.3
A faked face or voice can join a video visit as a patient or a clinician.
DOR confirms who is on the call and records who was connected.
HC-A.4
Someone with legitimate access can open or change a record for the wrong reason.
DOR requires a name and a reason for sensitive actions, recorded where no one can edit them.
The data that outlives the visit, and the rules you answer to.
HC-D.1
AI tools can be fed altered or planted records and documents.
DOR records the source of every input and keeps unverified data out of what the model uses.
HC-D.2
Samples, trial data, and consent records lose provable custody as they change hands.
DOR records every hand-off and the order it happened in.
HC-D.3
Claims and payment details can be changed between sender and receiver.
DOR checks them against where they came from before money moves.
No entries match. Try another word, or choose All.
Healthcare
Bring your system map, or just the questions your clinical and IT leaders keep asking. DOR will show you exactly where it fits.
