Human | Digital | Legal™
The Human | Digital | Legal™ framework, developed, by Mark Yoffe, MD, CISSP, a board-certified internist, gives clinical, cybersecurity, legal, compliance, and operational audiences a shared structure for recognizing related issues, assigning ownership, and coordinating response.
The Three Domains
- The Human domain focuses on patients, clinicians, staff, judgment, workflow, communication, trust, and follow-through.
- The Digital domain focuses on systems, records, access, data flows, technical controls, logs, recovery, and the reliability of information used in care.
- The Legal domain focuses on HIPAA privacy, notification duties, documentation, liability exposure, governance, evidence, and accountability.
CIA-HDL Matrix
The CIA-HDL Matrix applies the cybersecurity CIA triad — Confidentiality, Integrity, and Availability — to the Human | Digital | Legal™ framework.
For healthcare ransomware analysis, it helps show how one incident can expose protected health information, impair trust in clinical records, interrupt access to systems needed for care, and create patient-safety, HIPAA privacy, governance, and accountability issues at the same time.