Cloud computing has become a hot topic among healthcare CIOs, who are divided about its benefits.

Andrew Sroka, president and CEO of Fischer International, says the debate over cloud computing is well-justified given the proliferation of soft data, new patient privacy standards and ever-changing regulation. Sroka shares with Healthcare IT News the most common myths and potential risks associated with deploying IT processes via cloud computing.

[See also: Survey: IT confidence surging, fueled by healthcare.]

Three of the most common myths:

Myth #1: Identity management in the cloud is less secure. Quite the opposite, says Sroka. The cloud is often more secure and, in most cases, offers a more reliable and more scalable facility for healthcare organizations. Most information is encrypted in the cloud, whereas when solutions are deployed on-premise it is not uncommon for sensitive information to remain unencrypted, such as administrative credentials coded into scripts or configuration files, and personally-identifiable information.

Myth #2: One has to dramatically change infrastructure to accommodate identity management (IdM) in the cloud. No infrastructure changes are necessary for an organization to take advantage of cloud-based IdM services. Integration with existing IT systems can be accomplished seamlessly, as if the IdM solution were running on-premise.

Myth #3: Cloud-based identity management solutions are less capable than on-premise solutions
Cloud-based IdM solutions don't have to be different from on-premise solutions and can deliver the same functionality. However, cloud-based IdM solutions have a business driver making them different. The hosting provider will want to drive down the cost of hosting to take advantage of hardware/software/technical resource consolidation. In order to do so, IdM solutions running in the cloud must have a better design and they must be easier to maintain.     

Sroka says that when looking at actual risks, it is important to keep in mind that transitioning to the cloud does not present any unique risks to sensitive patient and personnel data that don't already exist in an on-premise environment.

[See also:  Survey: Majority of organizations don't protect patient data during software development.]

See the next page to read the three most common risks of cloud computing.