Oct 23, 2020 | Compliance, Cybersecurity, HIPAA, Information Security
October is National Cyber Security Awareness Month, and one of the main themes for 2020 is Securing Internet-Connected Devices in Healthcare. Securing IT devices in healthcare is critical, as any system downtime can lead to deaths and degraded response to emergencies....
Jun 3, 2019 | Compliance, Cybersecurity, HIPAA, Information Security, ISO27001, NIST 800-53, Payment Card Industry
By: Justin Fimlaid The Ohio Data Protection Act was passed in August of 2018 and went into effect as of November 2018. What’s unique about this data protection law is that it’s unlike recently passed privacy legislation recently seen in California and...
Feb 13, 2019 | Audit, Compliance, HIPAA, Information Security, ISO27001, New York Cyber 23 NYCRR 500, NIST 800-53, Risk Management
By: Kristof Holm We’ve written several blogs on risk assessments and controls assessments. However, these two terms are often co-mingled, used interchangeably, or incorrectly. Unfortunately, it’s very easy to do this and often if we aren’t careful even professionals...
Jan 16, 2019 | Audit, HIPAA, IRS1075, ISO27001, MARS-E, New York Cyber 23 NYCRR 500, NIST 800-53
By: Justin Fimlaid The beginning of the year is a great time to review your security posture. You have many options available to you as to how you conduct security review. The most common ways that we see companies approach a review of their security program generally...
Dec 3, 2018 | Compliance, HIPAA, Information Security
Author: Mark Brisson So you think you’re ready to start your first HIPAA gap analysis but aren’t sure where to start? Well, if you’ve never tackled one before, there are 10 key steps to prepare and execute a streamlined assessment. 1. Familiarize yourself There is...
Sep 6, 2018 | HIPAA, Risk Management
By: Mark Brisson, Information Assurance Analyst I often speak with healthcare organizations and have found that many are unsure of the difference between a HIPAA risk analysis and a HIPAA gap analysis as they related to the Security Rule. I’ve discovered that this is...
Aug 14, 2018 | Compliance, HIPAA, Information Security
By: Samantha Moench, Information Assurance Analyst Congress created the Health Insurance Portability and Accountability Act (HIPAA) and President Bill Clinton signed it into law in 1996. This act set national standards for protecting electronic healthcare transactions...