FAST Security Education Event
January 13, 2025 | Online
FAST Security Education Event:
Your Roadmap to Secure Health Data Exchange
As the January 1, 2026, compliance deadline looms, it’s imperative for healthcare organizations to stay ahead of the curve in secure health data exchange. This complimentary, half-day virtual education event brings together experts from FAST (FHIR at Scale Taskforce), The Sequoia Project, and HL7 to guide you through the essential steps for adopting the FAST Security IG.
Designed to help you meet TEFCA™’s security requirements, this session provides a clear path to implementing the FAST HL7 UDAP Security for Scalable Registration, Authentication, and Authorization FHIR Implementation Guide (FAST Security IG).
Why Attend?
-
Understand the RCE’s Security Timeline
Get an in-depth look at the phased requirements outlined in the July 1, 2024, Facilitated FHIR Implementation SOP.
-
Prepare for Compliance
Learn actionable strategies to meet TEFCA’s security milestones, from interim steps to final implementation.
-
Enhance Your Knowledge
Explore how the FAST Security IG safeguards patient privacy while fostering seamless, scalable interoperability.
Agenda Highlights
- Detailed Review of the SOP
A comprehensive walkthrough of the Recognized Coordinating Entity® (RCE®) FHIR Implementation SOP and what it means for your organization.
- Key Implementation Steps
Practical, step-by-step guidance for adopting the FAST Security IG, covering registration, authentication, and authorization protocols.
- Timelines and Milestones
Navigate the transition period with confidence and ensure compliance by January 2026.
Agenda
11:00 AM
|
Introduction to the Event
|
11:30 AM
|
Kick-off by Security IG Leads: General Overview
|
12:00 PM
|
FAST General Overview
|
12:15 PM
|
FHIR Roadmap and TEFCA
|
1:00 PM
|
Lunch Break
|
1:30 PM
|
TEFCA Security Requirements
|
2:15 PM
|
Introduction to the RI & Test Scripts
|
3:00 PM
|
Afternoon Break
|
3:15 PM
|
Exploring Open Source Tools
|
4:00 PM
|
Insights from Upcoming IHE Events and Project-based Testing
|
4:45 PM
|
Closing Remarks and Next Steps
|
Featured Speakers
Chris Muir
About Chris Muir – ASTP Network & Scalability Division Director
Chris Muir has worked in state and federal government for over 30 years. Currently, he works at the U.S. Department of Health and Human Services (HHS), Office of the Assistant Secretary for Technology Policy (ASTP). He is the Network & Scalability Division Director where he leads a team that provides subject matter expertise to internal and external interested parties implementing HHS identified health IT standards and implementation specifications. Previous to ASTP, Chris was the Strategic Projects Manager for the State of Arizona, CIO’s Office. He led key information technology initiatives including Arizona’s health information technology program. He received a Bachelor of Arts in Political Science and a Masters degree in Public Administration from Arizona State University.
Janice Reese
About Janice Reese, Program Manager, FAST
Janice Reese, a seasoned leader in healthcare information technology, brings a wealth of expertise in industry standards, workflow optimization, and cybersecurity. As a Senior Consultant with Point of Care Partners, Janice leads the HL7 FAST (FHIR at Scale Taskforce) initiative, instilling confidence in her ability to drive nationwide adoption of scalable FHIR implementations for seamless healthcare data exchange.
Her work with FAST focuses on critical pillars of interoperability, including Consent, Identity, Security, National Directory, and Testing. Janice ensures these foundational elements are optimized to meet the industry's needs, enabling efficient, secure, and patient-centered data sharing across stakeholders. Her leadership helps establish the frameworks and best practices for connecting healthcare systems and ensuring compliance with evolving standards and regulatory requirements.
David Pyke
About David Pyke, Technical Director, FAST
David Pyke is a seasoned expert in healthcare information technology, currently serving as a Senior Consultant at Dogwood Health Consulting. He contributes to advancing health information exchange standards and interoperability frameworks in this capacity. Notably, David serves as the Technical Director for the HL7 FHIR at Scale Taskforce (FAST) Consent Management project, overseeing the development of scalable consent management solutions within the healthcare sector.
His extensive experience includes serving as the Technical Author for the Trusted Exchange Framework and Common Agreement (TEFCA) technical documents, pivotal in shaping the Qualified Health Information Network (QHIN) Technical Framework.
Luis Maas
About Luis Maas, FAST Security Co-lead, CTO EMR Direct – Security for Scalable Registration, Authorization, and Authentication - Project Co-Lead
Luis Maas, CTO of EMR Direct is actively involved in standards development within the Direct Project, OpenID Foundation, and HL7. He is also a board certified Radiologist. He has been issued several patents for his work in quantitative analysis methodologies. He holds bachelor's and master's degrees in Electrical Engineering and Computer Science from MIT, an MD from Harvard, and a PhD in Medical Engineering from the Harvard-MIT division of Health Sciences and Technology. Luis is the chairman of the DirectTrust Security and Trust Compliance workgroup.
Didi Davis
About Didi Davis, Sequoia Project – Vice President of Informatics, Conformance, and Interoperability
Mrs. Davis has >30 years’ experience in the healthcare industry with emphasis on conformance testing, implementation, development, and management of information technology solutions and healthcare workflow requirements. She serves as the VP, Informatics, Conformance and Interoperability for the Sequoia Project that is a 501©3 not for profit organization based in Washington, DC. Her expertise includes connecting people, processes and technology to improve health care. She is responsible for driving the interoperability among health IT systems participating within the Carequality framework, the eHealth Exchange network (formerly known as the Nationwide Health Information Network - NwHIN and for the RSNA Image Share Validation programs in partnership with the Radiological Society of North America (RSNA) managed by Sequoia. She is responsible for the operations of 8 testing programs for Sequoia, including the RCE onboarding testing for TEFCA. She leads a group of experts from a wide range of stakeholders across the US to develop specific and pragmatic implementation guidance on improving data quality of the clinical content exchanged among networks and communities in the Data Usability workgroup under the Sequoia Interoperability Matters Forum. She also acts as the subject matter expert supporting the deployment efforts of the Image Exchange Use Case Implementation Guide for Carequality.
Jonathan Coleman
About Jonathan Coleman - Principal Security Risk Solutions, Inc. - Chief Information Security Officer for the TEFCA Recognized Coordinating Entity (RCE)
Johnathan Coleman is the Principal Consultant at Security Risk Solutions, Inc. He currently serves as the Chief Information Security Officer for the TEFCA Recognized Coordinating Entity (RCE) and provides SME support to the Assistant Secretary for Technology Policy (ASTP) and the Defense Health Agency (DHA) in the areas of security standards and cybersecurity policy. He previously worked as Coordinator for the ONC Standards and Interoperability (S&I) Framework and led several projects including the Data Segmentation for Privacy (DS4P) and Social Determinants of Health (SDOH) Data Tagging projects. Johnathan has a BEng in Aeromechanical Systems Engineering from the Royal Military College of Science in UK, maintains professional security certifications including CISSP, CISM and CRISC, and co-chairs the Community Based Care and Privacy workgroup at Health Level 7 (HL7) International.
Joe Lamy
About Joe Lamy – Standards and Specifications Subject Matter Expert Aegis.net
Joe Lamy is a specifications and testing consultant at AEGIS.Net. Joe created the testing suite for the HL7® Security for Scalable Registration, Authentication, and Authorization Implementation Guide, aka HL7® UDAP Security. He has authored numerous production specifications and guides for eHealth Exchange, Carequality and CommonWell, including their latest FHIR/UDAP guidance, and as the "Spec Sherpa" loves to demystify complex specifications for implementers. Joe is an active member of HL7® Security and other HL7® working groups, as well as the IHE ITI Technical Committee. When not working in health IT, Joe is an active songwriter and performing musician.
Corey Spears
About Corey Spears – Senior Consultant, Lantana Consulting Group
Corey Spears is a recognized expert in healthcare interoperability and a senior consultant with Lantana Consulting Group. With a deep background in health IT, Corey specializes in implementing and advancing standards like FHIR, HL7, and CDA to improve data sharing across the healthcare ecosystem. He has been instrumental in developing innovative solutions for healthcare data exchange, bringing technical leadership to projects that enhance care coordination, patient safety, and data quality. Known for his contributions to industry working groups and thought leadership, Corey is a trusted voice in shaping the future of healthcare interoperability.
Joe Shook
About Joe Shook, Surescripts - Senior Software Architect
Joe is a Senior Software Architect at Surescripts LLC. He was introduced to the Direct Project in 2011, an open-source initiative providing a secure, scalable, and standards-based solution for health addressing and transport using Public Key Infrastructure (PKI) to enable scalable trust. In 2012, Joe took ownership of the C# Reference Implementation. He is now leading the development of the UDAP .NET SDK, which also leverages PKI for scalable trust, while learning the FHIR standard. The SDK includes deconstruction tooling, learning resources, and fully functional reference implementations as an open-source contribution.
Tom Loomis
About Tom Loomis (Evernorth) Principal and Enterprise Architect specializing in interoperability
Tom Loomis is a Principal and Enterprise Architect specializing in interoperability at Evernorth Health Services. With extensive experience in designing and implementing healthcare integration strategies, Tom is dedicated to advancing data connectivity and fostering seamless information exchange across healthcare systems. He plays a pivotal role in developing scalable solutions that drive efficiency, improve patient outcomes, and ensure compliance with industry standards. His expertise spans emerging technologies, enterprise architecture, and strategic alignment of IT systems to support Evernorth's mission of transforming healthcare for the better.
Matt Blackmon
About Matt Blackmon - Standards and Conformance Testing Programs Manager at The Sequoia Project
Matt Blackmon is the Standards and Conformance Testing Programs Manager for the Sequoia Project and is HL7 Certified FHIR Proficient and an IHE Certified Professional. He brings extensive experience as an IHE Connectathon Monitor for both IHE USA and IHE International, where he also mentors junior monitors. Matt holds several graduate degrees including an MS in Computer Science from the University of Tennessee and is an HL7 Certified Educator with nearly a decade of teaching experiencefor HL7. He has developed and pioneered several courses, including the innovative "HL7 FHIR by Trial" course as well as serving on the team that developed the HL7 FHIR Implementer: Foundational certification. He holds faculty appointments at multiple universities and has been an invited lecturer at UC Berkeley in the Public Health Informatics program for the California Consortium for Public Health Informatics and Technology.
Who Should Attend?
This event is tailored for:
- Healthcare IT Leaders and Decision-Makers
- Compliance Officers and Security Professionals
- TEFCA Participants and Prospective QHINs
- FHIR Implementers and Developers
Secure Your Spot Today
Prepare your organization for the future of health data exchange. Register now for this essential education event and stay ahead of the January 2026 compliance deadline.