Skip to main content

The PADS Framework for Compliance and Security - Part 1

Gabriel Lowy

The PADS (Performance Analytics Decision Support) Framework recommends a more strategic approach to user experience and application performance. Providing superior user experience consistently is a clear competitive differentiator on the path to achieving the three components of higher return on investment (ROI). These components are:

1. Reducing costs

2. Enhancing productivity

3. Generating incremental revenue streams

But deeper intelligence into the application delivery chain can also help companies meet compliance and security requirements more effectively in order to achieve their risk management objectives. Industries such as healthcare and financial services are under increasing regulatory pressure to demonstrate systems efficacy and security for protecting sensitive personal information and resilience against market disruptions.

Below we highlight new regulations in these two industries that underscore the risks companies face when they don’t have a good handle on user experience or application performance across the application delivery chain.

Healthcare: Pressure to Improve Patient Outcomes at Lower Costs

Major reforms are driving the healthcare community to leverage technology in a manner that provides for a timely and secure exchange of information related to patient care.  The Affordable Care Act has resulted in upgrades to existing data exchange services, deployment of new ones, and the incorporation of mobile access and communication between providers and patients.

Among the drivers are new measures that estimate the effectiveness of health plans. The National Committee for Quality Assurance's Healthcare Effectiveness Data and Information Set (HEDIS) sets performance metrics on provider quality of care. The data required to calculate HEDIS scores come from many different sources, such as clinical applications and pharmacy and medical data claims systems.

Many health providers and plans have been focused on the International Classification of Diseases, Tenth Edition (ICD-10). ICD 10 is a clinical cataloging system that went into effect for the U.S. healthcare industry on Oct. 1, 2015. Providers, coders, IT professionals, insurance carriers, government agencies and others use ICD codes to properly note diseases on health records, track epidemiological trends, and assist in medical reimbursement decisions. These codes must be consistent across systems to ensure proper classification in diagnoses.

Providers are also occupied with Meaningful Use stage 2 (MU2), which is the second phase of the Meaningful Use incentive program. MU2 is designed for eligible providers to demonstrate their progress toward meaningful patient engagement using state-of-the-art healthcare IT and methods best suited to their practice.

The Centers for Medicare and Medicaid Services (CMS) established criteria that eligible professionals, hospitals and critical access hospitals must meet in order to continue to participate in Medicare and Medicaid Electronic Health Record (EHR) Incentive Programs.

Common themes of healthcare reform are patient engagement and the information exchange with external stakeholders. These include secure communication with patients, collaboration with other providers and an exchange of information with registries. Each organization is required to track, monitor and report on their efforts to meaningfully use technology to meet quality of service measures.

The Health Insurance Portability and Accountability Act (HIPAA) defines electronic personal health information and what covered entities and business associates must do to secure and protect it via the Security Rule. This includes conducting annual assessments of security and compliance with 42 specific safeguards, covering Administration, such as policies and procedures, Physical, such as access to the workplace where personal health information (PHI) is commonly used, and Technical, such as encrypting PHI data at rest and on the move.

Stellar user experience and application performance among and between constituent systems are critical to ensure systems efficacy and accurate scoring, as well as consistent diagnoses to reduce errors and improve patient outcomes. It also facilitates regulatory compliance for all stakeholders throughout the healthcare ecosystem.

Read The PADS Framework for Compliance and Security - Part 2, covering the global securities market.

Hot Topics

The Latest

Enterprises today operate in a real-time environment where uninterrupted access to trusted data has become a baseline expectation for users, applications and automated systems. Traditional DataOps models, built on manual effort and human triage, cannot keep pace with this always active demand. AI agents are emerging as the operational backbone, ensuring consistent data availability, reinforcing trustworthiness and enabling a level of scale that manual processes cannot achieve ...

For decades, trust in the digital workplace rested on familiar signals. We trusted faces on video calls, voices on the phone, and emails that appeared to come from people we knew. These cues felt human and intuitive. They anchored how decisions were made, approvals were granted, and access was authorized. AI-powered deepfakes have quietly broken that model ...

Cloud migration was supposed to be a one-way door. For most enterprises, it turns out it isn't. Cloud data repatriation is a real and growing trend. A new survey ... finds that 89% of organizations plan to expand their on-premises infrastructure footprint over the next two years — and 75% have already moved at least some workloads back from public cloud in the past 24 months. The findings point to a broad rethinking of where data belongs ...

Over the past few years, large language models (LLMs) have revolutionized the software industry. Given their ability to excel at multi-step reasoning, LLMs have helped enterprises streamline workflows and adapt to the unknown. However, employing such models comes with sky-high costs, latency issues, and limited flexibility. In the realm of IT operations, it is generally wiser to employ smaller, domain-specific models instead ...

For years, DevOps teams operated under a simple assumption: collect enough telemetry, and you can find and fix any problem. That assumption is breaking down. Modern enterprises now operate across microservices, hybrid cloud environments, APIs, Kubernetes, and highly automated delivery pipelines. Releases happen continuously, dependencies shift constantly, and failures spread faster than teams can diagnose them ...

New Relic surveyed IT and engineering leaders from the media and entertainment (M&E) sector to understand what's working — and where challenges persist with their observability practices. The findings reveal how M&E organizations are navigating rising platform complexity, audience expectations, and AI-driven change. Below are five takeaways that stand out ...

Let me start with something I've seen play out more times than I can count. A team hits a wall with the cloud. Costs creep up, then spike. Performance starts to feel inconsistent. Someone in finance asks a simple question like "why did this double?" and nobody has a clean answer ... Maybe this isn't the right place for everything. That realization feels like a breakthrough, like you've identified the problem. In reality, you've just identified the starting line ...

In MEAN TIME TO INSIGHT Episode 24, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses network observability tool sprawl ... 

In cloud-native systems, scaling is often as simple as moving a slider. For on-premise databases, the stakes are different. Over-provisioning hardware is expensive. Under-provisioning leads to performance bottlenecks that are difficult to fix once the equipment is in the rack ...

When most people think about cybersecurity, they picture firewalls, encryption, and access controls — technical tools designed to protect systems and data. But beneath the technology lies a deeper set of principles about trust, decision-making, and resilience ... The best leaders don't eliminate risk. They manage it intelligently. And in many ways, cybersecurity offers a surprisingly useful playbook for doing exactly that ...

The PADS Framework for Compliance and Security - Part 1

Gabriel Lowy

The PADS (Performance Analytics Decision Support) Framework recommends a more strategic approach to user experience and application performance. Providing superior user experience consistently is a clear competitive differentiator on the path to achieving the three components of higher return on investment (ROI). These components are:

1. Reducing costs

2. Enhancing productivity

3. Generating incremental revenue streams

But deeper intelligence into the application delivery chain can also help companies meet compliance and security requirements more effectively in order to achieve their risk management objectives. Industries such as healthcare and financial services are under increasing regulatory pressure to demonstrate systems efficacy and security for protecting sensitive personal information and resilience against market disruptions.

Below we highlight new regulations in these two industries that underscore the risks companies face when they don’t have a good handle on user experience or application performance across the application delivery chain.

Healthcare: Pressure to Improve Patient Outcomes at Lower Costs

Major reforms are driving the healthcare community to leverage technology in a manner that provides for a timely and secure exchange of information related to patient care.  The Affordable Care Act has resulted in upgrades to existing data exchange services, deployment of new ones, and the incorporation of mobile access and communication between providers and patients.

Among the drivers are new measures that estimate the effectiveness of health plans. The National Committee for Quality Assurance's Healthcare Effectiveness Data and Information Set (HEDIS) sets performance metrics on provider quality of care. The data required to calculate HEDIS scores come from many different sources, such as clinical applications and pharmacy and medical data claims systems.

Many health providers and plans have been focused on the International Classification of Diseases, Tenth Edition (ICD-10). ICD 10 is a clinical cataloging system that went into effect for the U.S. healthcare industry on Oct. 1, 2015. Providers, coders, IT professionals, insurance carriers, government agencies and others use ICD codes to properly note diseases on health records, track epidemiological trends, and assist in medical reimbursement decisions. These codes must be consistent across systems to ensure proper classification in diagnoses.

Providers are also occupied with Meaningful Use stage 2 (MU2), which is the second phase of the Meaningful Use incentive program. MU2 is designed for eligible providers to demonstrate their progress toward meaningful patient engagement using state-of-the-art healthcare IT and methods best suited to their practice.

The Centers for Medicare and Medicaid Services (CMS) established criteria that eligible professionals, hospitals and critical access hospitals must meet in order to continue to participate in Medicare and Medicaid Electronic Health Record (EHR) Incentive Programs.

Common themes of healthcare reform are patient engagement and the information exchange with external stakeholders. These include secure communication with patients, collaboration with other providers and an exchange of information with registries. Each organization is required to track, monitor and report on their efforts to meaningfully use technology to meet quality of service measures.

The Health Insurance Portability and Accountability Act (HIPAA) defines electronic personal health information and what covered entities and business associates must do to secure and protect it via the Security Rule. This includes conducting annual assessments of security and compliance with 42 specific safeguards, covering Administration, such as policies and procedures, Physical, such as access to the workplace where personal health information (PHI) is commonly used, and Technical, such as encrypting PHI data at rest and on the move.

Stellar user experience and application performance among and between constituent systems are critical to ensure systems efficacy and accurate scoring, as well as consistent diagnoses to reduce errors and improve patient outcomes. It also facilitates regulatory compliance for all stakeholders throughout the healthcare ecosystem.

Read The PADS Framework for Compliance and Security - Part 2, covering the global securities market.

Hot Topics

The Latest

Enterprises today operate in a real-time environment where uninterrupted access to trusted data has become a baseline expectation for users, applications and automated systems. Traditional DataOps models, built on manual effort and human triage, cannot keep pace with this always active demand. AI agents are emerging as the operational backbone, ensuring consistent data availability, reinforcing trustworthiness and enabling a level of scale that manual processes cannot achieve ...

For decades, trust in the digital workplace rested on familiar signals. We trusted faces on video calls, voices on the phone, and emails that appeared to come from people we knew. These cues felt human and intuitive. They anchored how decisions were made, approvals were granted, and access was authorized. AI-powered deepfakes have quietly broken that model ...

Cloud migration was supposed to be a one-way door. For most enterprises, it turns out it isn't. Cloud data repatriation is a real and growing trend. A new survey ... finds that 89% of organizations plan to expand their on-premises infrastructure footprint over the next two years — and 75% have already moved at least some workloads back from public cloud in the past 24 months. The findings point to a broad rethinking of where data belongs ...

Over the past few years, large language models (LLMs) have revolutionized the software industry. Given their ability to excel at multi-step reasoning, LLMs have helped enterprises streamline workflows and adapt to the unknown. However, employing such models comes with sky-high costs, latency issues, and limited flexibility. In the realm of IT operations, it is generally wiser to employ smaller, domain-specific models instead ...

For years, DevOps teams operated under a simple assumption: collect enough telemetry, and you can find and fix any problem. That assumption is breaking down. Modern enterprises now operate across microservices, hybrid cloud environments, APIs, Kubernetes, and highly automated delivery pipelines. Releases happen continuously, dependencies shift constantly, and failures spread faster than teams can diagnose them ...

New Relic surveyed IT and engineering leaders from the media and entertainment (M&E) sector to understand what's working — and where challenges persist with their observability practices. The findings reveal how M&E organizations are navigating rising platform complexity, audience expectations, and AI-driven change. Below are five takeaways that stand out ...

Let me start with something I've seen play out more times than I can count. A team hits a wall with the cloud. Costs creep up, then spike. Performance starts to feel inconsistent. Someone in finance asks a simple question like "why did this double?" and nobody has a clean answer ... Maybe this isn't the right place for everything. That realization feels like a breakthrough, like you've identified the problem. In reality, you've just identified the starting line ...

In MEAN TIME TO INSIGHT Episode 24, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses network observability tool sprawl ... 

In cloud-native systems, scaling is often as simple as moving a slider. For on-premise databases, the stakes are different. Over-provisioning hardware is expensive. Under-provisioning leads to performance bottlenecks that are difficult to fix once the equipment is in the rack ...

When most people think about cybersecurity, they picture firewalls, encryption, and access controls — technical tools designed to protect systems and data. But beneath the technology lies a deeper set of principles about trust, decision-making, and resilience ... The best leaders don't eliminate risk. They manage it intelligently. And in many ways, cybersecurity offers a surprisingly useful playbook for doing exactly that ...