- compliance
- Cybersecurity
- healthcare
- HIPAA Risk Assessment
- OCR
- PHI
- protected health information
- risk assessment
- hipaa security rule
- office for civil rights
- phishing schemes
- known vulnerabilities
- top cyberattacks in healthcare
- compliance
- Cybersecurity
- healthcare
- OCR
- PHI
- protected health information
- security risk assessment
- Enterprise-wide Risk Analysis
- HIPAA Privacy Rule
- hipaa security rule
- office for civil rights
- hospital data breaches
- HIPAA Assessment
- compliance
- Cybersecurity
- healthcare
- HIPAA
- ePHI
- protected health information
- security risk assessment
- Risk Analysis
- data breach
- HIPAA Privacy Rule
- hipaa security rule
- patient privacy
- security incident
- e-PHI
- risk analysis steps
- compliance
- Cybersecurity
- security strategy
- other
- hipaa security rule
- NIST Security Framework
- security strategic planning
- security frameworks
- security regulations
- Cybersecurity
- healthcare
- HIPAA compliance
- HIPAA Privacy Rule
- hipaa security rule
- corrective actions
- NIST information security handbook
- HHS OCR corrective actions
- patient right of access
- security improvements
- other
- hipaa security rule
- security policy review
- NIST Security Framework
- security policies
- security policy updates
- maintaining security policies
- Cybersecurity
- healthcare
- HIPAA compliance
- hipaa security rule
- securing patient data
- patient safety
- patient safety awareness week
- psaw
- PSAW 2022
- healthcare
- HIPAA compliance
- ePHI
- OCR
- HIPAA Privacy Rule
- hipaa security rule
- healthcare data breaches
- Office of Civil Rights
- HIPAA violations 2021
- 2021 HIPAA violation settlements
- patient right of access violations
- Excellus breach
- Cybersecurity
- healthcare
- HIPAA compliance
- ePHI
- healthcare security
- data breaches
- hipaa security rule
- incident response plan
- cybersecurity incident
- qualified VCISO
- incident response plan testing
- security incident
- identity theft resource center
- ponemon institute
- Cybersecurity
- healthcare
- HIPAA compliance
- information security
- nist cybersecurity framework
- Privacy
- hipaa security rule
- data security
- PCI DSS
- HITRUST
- HITRUST cybersecurity framework
- ISO-IEC
- HITRUST CSF
In addition to tracking and imposing penalties for HIPAA violations and data breaches, the U.S. Department of Health &[…]
In the first six months of 2022, hospitals across the U.S. reported 57 data breaches to the HHS Office for Civil[…]
For nearly a year, Lisa J. Pino has served as Director of the U.S. Department of Health and Human Services (HHS) Office[…]
Every cybersecurity program or information security program needs a guiding light. A beacon that shows the way. A[…]
Experience has made us all true believers in cybersecurity and solid information security programs. We understand that[…]
Security policies serve as formal documentation of your organization’s overall security strategy and are fundamental to[…]
Cyber Safety is Patient Safety is the mantra this year during Patient Safety Awareness Week March 13 to 19, 2022. This[…]
The HHS Office for Civil Rights has published detailed information about the HIPAA violations it settled in 2021.
How a Qualified VCISO Can Help One of the fundamental components of a robust cybersecurity program is incident[…]
Six Things You Should Know As the volume of data has exploded in the information age, an increasingly complex web of[…]
