Meredith R. Harper, Chc, Chpc, Hcispp, Itil, Cism Email & Phone Number

West Palm Beach, Florida, Us

Evansville, In, Us

Stamford, Connecticut, Us

Detroit, Mi, Us

Indianapolis, Indiana, Us

• Leads and sets the strategy for the global Information Security organization with responsibility for Cyberfusion (i.e., Incident Response, Insider Threat, Cyber Threat Intelligence, Security Operations Center and Adversary Simulation), Identity & Access Management, Security Architecture, Security Engineering, Remote Access Program, Multifactor Authentication Program, Third-Party Risk Management Program, Integrated Risk Management Program, Information Security Audit Program and the Information Security Education Program.• Oversees the development, implementation and monitoring of a strategic integrated information security risk management strategy, framework and approach with associated information security risk tolerances.• Engages with Board Members, Executives & Senior Leadership to ensure alignment of the global cybersecurity strategy across multiple business units, councils and functions. • Serves as Incident Commander during cybersecurity incidents which includes internal containment activities as well as notifications externally and internally. • Manages $90M annual budget as well as 116 FTEs and approximately 150 contractors worldwide to ensure proper technology and human capital investments to drive organization maturity.• Collaborates with the Chief Technology Officer to ensure alignment of information security support for technology strategies across Lilly’s business units.• Serve as primary advisor to the Enterprise Information Security Governance committee on all information security related issues, incidents and projects.• Strategically advises and shares metrics and analysis with stakeholder groups to optimize visibility of information security risks and areas of improvement across the enterprise.

Indianapolis, Indiana, Us

Housed within the Michigan Department of Health and Human Services, the 13-member commission facilitates and promotes the design, implementation, operation and maintenance of Michigan's health care information infrastructure.

Detroit, Mi, Us

• Established the first enterprise Information Privacy & Security Office to address privacy & security risks which includes the following teams: Network Security Services, Information Security Services, Information Privacy Services, IT Audit & Risk Management Services and Identity & Access Management Services.• Led the Enterprise Privacy & Security Council, comprised of operational leaders representing major operational markets, in the development, implementation, maintenance and monitoring of policies and procedures.• Led the Code A/B Team that manages all data breach incident response which includes notifications externally and system wide as well as serving as the primary contact for the Office for Civil Rights.• Led and set the strategy for the teams managing the Data Loss Prevention Program, Remote Access Program, Multifactor Authentication Program, Payment Card Industry Data Security Standard Program, Cybersecurity & Threat Intelligence Program, Security Operations Center and the Third-Party Risk Management & Audit Program.• Served as the Privacy & Security subject matter expert on the Compliance Council, HFHS University Advisory Council, Vendor Management Team, Enterprise Risk Council, Audit & Compliance Committee of the Board and various System councils. • Conducted investigations of complex privacy & security violations in conjunction with operational leadership, human resources, IT and corporate legal affairs.• Led the Enterprise Privacy & Security Council to create policies and procedures to ensure that the patient’s right to inspect, amend, and restrict access to protected health information complies with federal regulations.• Ensured compliance with privacy & security practices and consistent application of sanctions for failure to comply with privacy & Security policies for all workforce members and for all business associates, in cooperation with Human Resources, administration, and corporate legal affairs.

Nashville, Tn, Us

Served as faculty member for the HIPAA Compliance BootCamp™ which distills the critical information needed to know about the HIPAA Privacy and Security Final Rules and the HITECH Breach Notification Rule.

The Michigan Healthcare Cybersecurity Council was founded in June 2013 in support of the Michigan Cyber Initiative. The mission of the MiHCC is to protect the critical healthcare infrastructure in the State of Michigan from cybersecurity threats and to mature and advance the state of cybersecurity preparedness across the healthcare industry in Michigan.​The MiHCC is an independent, public-private partnership in the State of Michigan involving hospitals and healthcare systems, payer organizations, physician organizations and supporting members such as the Michigan Department of Technology, Management and Budget, The Michigan Department of Community Health, the Michigan Health and Hospital Association and the Michigan Health Information Network.

The Michigan Healthcare Cybersecurity Council was founded in June 2013 in support of the Michigan Cyber Initiative. The mission of the MiHCC is to protect the critical healthcare infrastructure in the State of Michigan from cybersecurity threats and to mature and advance the state of cybersecurity preparedness across the healthcare industry in Michigan.​The MiHCC is an independent, public-private partnership in the State of Michigan involving hospitals and healthcare systems, payer organizations, physician organizations and supporting members such as the Michigan Department of Technology, Management and Budget, The Michigan Department of Community Health, the Michigan Health and Hospital Association and the Michigan Health Information Network.

HIMSS is a global, cause-based, not-for-profit organization focused on better health through information technology (IT). HIMSS leads efforts to optimize health engagements and care outcomes using information technology. The Privacy and Security Committee guides implementation of strategic initiatives that promote the privacy and security of healthcare information and management systems. The Committee also provides oversight for several volunteer task forces and work groups.

MIFA’s mission is to strengthen the healthcare ecosystem by working to reduce the frequency and impact of medical identity fraud and to better protect the public from the resulting financial, physical and emotional damage it can cause. MIFA provides leadership, education and awareness to drive the development of best-in-class technologies and influences changes to regulation, policies and law regarding Personally Identifiable Information (PII) and Protected Health Information (PHI).

MIFA’s mission is to strengthen the healthcare ecosystem by working to reduce the frequency and impact of medical identity fraud and to better protect the public from the resulting financial, physical and emotional damage it can cause. MIFA provides leadership, education and awareness to drive the development of best-in-class technologies and influences changes to regulation, policies and law regarding Personally Identifiable Information (PII) and Protected Health Information (PHI).Our vision is of the public-at-large and industry as a whole playing significant roles in better protecting themselves against medical identity theft and its devastating effects by:•Cultivating knowledge & problem solving by fostering collaboration among MIFA members, strategic partners, legislators and regulators.•Performing research to quantify the cost of medical identity theft and to uncover the associated trends and patterns.•Raising awareness and providing education on medical identity theft and the associated ramifications.•Working with policy decision makers to develop policies and procedures that work most effectively to reduce medical identity fraud.•Empowering the public-at-large to be the first line of defense in protecting information and preventing fraud.MIFA Founders share these common beliefs:•Strong personal and professional ethics.•A desire to assist others and make a lasting difference in the world.•A passion for protecting individuals and preventing criminals from committing healthcare fraud.To accomplish our mission, MIFA holds a coordinated and comprehensive approach that unites stakeholders from all sectors within the healthcare ecosystem in order to share information necessary to bring about the fundamental shifts required to:•Quantify the problem and understand the trends and patterns with medical identity fraud.•Educate the industry and consumers on protecting data.•Empower consumers to take a role in protecting their PHI/PII.

Trillium Academy was founded in 2002 by Mr. Ron Palmer as a kindergarten through sixth grade program. The school grade level span increases by one grade level each school year. In September of 2008, Trillium Academy will service all grade levels from kindergarten through twelfth grades. The vision of Trillium was to provide a school environment that had a focus in the Fine and Performing Arts Career Pathway while utilizing the Montessori philosophy.

Served a Board Member & Board Chair for a non-profit that promoted social change and justice working towards the elimination of domestic and sexual violence, and provided individualized direct services, education, support, and advocacy for individuals and families affected by violence in metro-Detroit.

Detroit, Mi, Us

•Managed the day-to-day activities for the corporate HIPAA Compliance Project for a leading managed care company, which includes serving as a subject matter expert and committee team co-leader for the Privacy & Security workgroup.•Provided HIPAA project status reports and presentations to Senior Management on a regular basis.

Dayton, Oh, Us

•Provided implementation, consulting, customer support, vendor selection, process improvement and project management services to various business departments such as Human Resources, Patient Accounts, Accounting, etc.•Managed activities for the corporate wide HIPAA Compliance Project.•Coached, lead and mentored inexperienced project managers throughout the project lifecycle.

• Provided planning and project management support for an automated decision support system that tracked $4.5 billion in sales transactions each year for the Air Force Materiel Command.• Maintained and documented the status of integrated legacy systems and determined the impact of schedule and technical changes.• Performed business process improvement tasks associated with the program office.• Developed HIPAA specific products & services to support business development activities in the state of Ohio.

Macon, Ga, Us

•Managed the mandatory training, continued education and corporate compliance initiatives, mandated by JCAHO for 200+ FTEs.•Managed & oriented 100 temporary FTEs for clerical support in the patient care areas.•Provided project management support, ensuring that small & medium sized implementations & projects were remaining within budget and scope.•Redesigned process workflow and standardized current educational processes across various information oriented areas, which included the creation of department specific new employee orientation materials.•Provided project management support to the Medipac team and assisted with various upgrade projects for our Year 2000 efforts.•Served as the Customer Encounter Consultant for the Medipac Team to increase customer perception and satisfaction.•Decreased a 14,000-hour project backlog by 75% for the Medipac Team by utilizing basic project management methodologies and software tools.

New Brunswick, Nj, Us

•Provided assistance to Senior Management Consultants in analyzing and developing recommendations for acute care facilities utilizing the BenchMark, which allowed healthcare clients to benchmark their specific institutions against comparable institutions across the country.•Observed, collected and analyzed, labor, finance and materials data related to the Operating Room or Information Services Department using proprietary strategies to determine the operating efficiency of the specific area.•Documented recommendations and created comparative databases for presentation and future studies, respectively.

Toronto, On, Ca

•Analyzed data requirements, assessed data quality, and implemented design of custom healthcare databases for managed care clients utilizing the DataScan system, which is a paid claims data reporting system.•Provided functional support for the production process for each new implementation. •Provided the end-users with database consulting & education throughout the implementation.•Managed and coordinated work schedules of custom programming and database operations resources to insure timely completion of each milestone.•Managed 2-4 supporting team members during the data investigation phase of the implementation.•Tested and evaluated the databases to insure conformity with expectations related to design specifications, product requirements, and analytical needs.•Worked closely with the client and the account management team to insure that the install or update was completed in the most time efficient and cost effective manor.

Toronto, On, Ca

• Managed and implemented the custom creation of healthcare databases in a research environment for a nationally recognized healthcare information corporation utilizing DataProbe, which is a data analysis product.• Analyzed extracted data for reasonability and accuracy, managed the archive and restoration processes, and assisted in project completion and deliverable tasks.• Participated in Quality Assurance Testing for DataProbe and assisted with external and internal software training.• Developed training materials and databases for client specific educational sessions.• Conducted educational sessions for small groups as well as individual training sessions for MEDSTAT staff members.

Master Of Jurisprudence, Compliance

Mhsa, Health Services Administration

Bs, Computer Information Systems

Diploma, College Prep

Junior High/Intermediate/Middle School Education And Teaching