Healthcare Security Compliance Assessments: Choosing the Right Cybersecurity Audit

Healthcare Security Compliance Assessments

Healthcare organizations spend, on average, between four and seven percent of their IT budgets on cybersecurity. However, as security teams strive to spend their resources on products and services that protect patient data while delivering a meaningful return on their investment, they face a critical question: which cybersecurity and compliance assessments are the best use … Read more

HIPAA Risk Assessments: What Kind of Privacy and Security Threat Analysis is Required for Compliance?

HIPAA Risk Assessments

Under HIPAA, covered entities are required to complete a risk assessment (also referred to as a risk analysis) to identify potential threats to their protected health information (PHI). “Conducting a risk analysis is the first step in identifying and implementing safeguards that comply with and carry out the standards and implementation specifications in the Security … Read more

Responding to a Healthcare Data Breach

Responding to a Healthcare Data Breach

With a record number of healthcare data breaches occurring in 2019 – 510 incidents of 500 or more records each, according to the HIPAA Journal – organizations are becoming more attentive to their security controls. Preventive measures, such as penetration testing and strong cybersecurity controls, can reduce the risk of a breach. However, the constant … Read more

HIPAA Compliance for Telemedicine Providers

According to the American Hospital Association, more than 75 percent of hospitals offer telemedicine as a service, and 70 percent of patients feel comfortable communicating with their healthcare providers via text, email, or video. However, while patients and providers are embracing the convenience and accessibility of telehealth, security concerns still remain – especially in regards … Read more

Why HITRUST CSF Needs to Be On Your Radar for 2020

Digital image of DNA for HITRUST topic

When it comes to protecting privacy and securing data and other sensitive information, healthcare organizations are some of the most scrutinized. They face a huge number of federal regulations, compliance standards and state laws, including HIPAA, HITECH, ISO 27001, PCI DSS, NIST, COBIT, and FTC. For third-party healthcare partners, this makes proving trustworthiness with sensitive … Read more

HIPAA Omnibus Rule Unveiled

Image of medical information form for an article covering HIPAA Omnibus Rule

Did you know that the new HIPAA Privacy and Security final rule came into effect March 26? The rule, more commonly known as the HIPAA Omnibus Rule brings about a drastic change in the way practices are supposed to handle breach notifications. This change is something you should be aware of. Under the old rule, … Read more