As a member of the Business Technology Solutions IT Risk Management team within McKesson's U.S. Pharmaceutical business unit, my focus is information security, risk management and regulatory compliance as it relates to information technology.

I serve as McKesson's representative on the Information Protection Advisory Board for HITRUST (Health Information Trust Alliance). It's a healthcare industry collaborative effort focused on developing mechanisms to secure patient data within the healthcare system. My work with HITRUST is outside the scope of my original job description, but I've enjoyed the opportunity to get involved with such an important issue that millions of Americans and our nation's top healthcare organizations face.

Senior Manager, IT Governance
McKesson U.S. Pharmaceutical
San Francisco, CA

John Sapp

The security and privacy of patient information is extremely important. The introduction of the HITECTH (Health Information Technology for Economic and Clinical Health) Act as part of the ARRA (American Recovery and Reinvestment Act) stimulus package provides a funding provision for hospitals, clinicians, physicians, pharmacies and payors to adopt electronic health records. So, the regulatory requirements around data security and privacy have increased significantly. I am proud to work with our Chief Information Security Officer, Michael Wilson, who serves as McKesson's executive council member of HITRUST, as we strive to contribute and support the development of practical solutions that can be used to empower healthcare.