5 Principles to Keep in Mind When Starting Your Security Risk Assessment
Healthcare organizations in the United States have been the most compromised by data breaches for several years, and that’s not likely to stop anytime soon.1 That’s why organizations in the healthcare...
View ArticleThe Risk of Sampling Care Delivery Locations for Your HIPAA SRA
The HIPAA Security Rule requires that Covered Entities and participating Business Associates perform an annual Security Risk Assessment (SRA) to demonstrate that they are taking steps to safeguard...
View Article3 Strategies for Eliminating HIPAA Location Sampling Risks
Healthcare organizations that have many locations often resort to making the difficult choice of sampling care delivery locations to manage cost and scope when performing their annual HIPAA Security...
View Article5 Things You Need to Know for HIPAA Compliance in 2024
HIPAA compliance is changing. New ways of working in the healthcare industry, the migration to digital, and evolving technologies have driven updates to the HIPAA privacy rule in 2023 that will become...
View ArticleWho’s Completing Your HIPAA SRA This Year? How to Decide
The deadline for submitting your HIPAA security risk assessment (SRA) is getting closer. And the biggest mistake small and medium-sized businesses (SMBs) can make is waiting until the last minute to...
View ArticleHow to Be HIPAA Compliant: Is Training Enough?
In the ever-evolving world of healthcare, protecting sensitive patient information isn’t just a good practice—it’s the law. HIPAA has long been the North Star guiding healthcare organizations toward...
View Article4 Ways Assessors Make Your HIPAA SRA Painless
Every healthcare covered entity must complete their HIPAA Security Risk Assessment (SRA) by December 31st – and time is quickly running out. But many private practices and healthcare organizations...
View Article5 Recent HIPAA Breaches (And How to Make Sure You’re Not Next)
A recent wave of HIPAA security breaches has sent a clear message to the healthcare industry: regardless of a covered entity’s size or presence, the reputational and financial risks associated with any...
View ArticleThe National Health Emergency Ended 6 Months Ago: HIPAA Compliance Can No...
The Biden administration officially ended the COVID-19 Public Health Emergency (PHE) over six months ago. But many healthcare enterprises still have not addressed the implications this has on HIPAA...
View ArticleDevising Your plan for HIPAA Remediation Post-SRA
Completing your HIPAA SRA is an important step towards maintaining compliance, but you cannot stop there. Data breaches from exploited credentials require an average of 341 days to be contained...
View ArticleHow to Prepare Your Organization to Avoid Vulnerabilities in 2024
Remediating cybersecurity vulnerabilities is not something for your “to-do” list – it is an urgent priority in 2024. The average healthcare data breach costs nearly $11 million, and given that...
View ArticleHow Healthcare Enterprises Can Deliver Efficient Remediation Across Their...
Every enterprise healthcare organization understands the importance of cybersecurity, but few have robust processes in place to efficiently remediate vulnerabilities or adapt to future challenges....
View Article5 Crucial Ways to Drive Urgency Around Cybersecurity Remediation
Navigating cybersecurity in a healthcare organization can feel like being a lookout aboard the Titanic: you can see the iceberg coming, but how do you convince the captain to change course? This blog...
View ArticleWhy Healthcare IT Expertise Is Crucial to a Quality Penetration Test for...
With the increased severity and frequency of all forms of cybercrime, it’s not surprising that the demand for penetration testing as a preventative measure has grown enormously. Properly done, a...
View ArticleImproving Security Posture with Integrated Risk Management (IRM): 6 Vital...
With the growing complexity of risk assessments and changing healthcare compliance regulations, IT and Security leaders are looking for a new approach that acknowledges the true business impact of...
View Article5 Essential Steps to Create a Formalized Healthcare Cybersecurity Risk...
Cybersecurity remediation management could be summed up in a single phrase: clarity is power. With clear instructions and a deep understanding of the goals, risks can be addressed and resolved...
View ArticleThird-Party Risk Management in Healthcare: Everything You Need to Know
Third-party vendors are the Achillies heel of healthcare cybersecurity. As providers have become more aware of cyberthreats, attackers have changed tactics. Rather than attempting to access data from...
View ArticleA Wake-Up Call for Enterprise Healthcare: Why Proactive Cybersecurity is...
When a cyber-attack forced Change Healthcare to shut down 111 different services and pay a $22 million ransom in early 2024, it sparked enough outrage to prompt an investigation from Congress. This...
View ArticleA Roadmap to Improved Security Posture for Healthcare Executives
Healthcare cybersecurity is more complex – and urgent – than ever. Access our recorded webinar now to hear from industry experts as they discuss how to develop an actionable plan to fortify your...
View ArticleSix Essential Risk Management Tools in Healthcare Cybersecurity
The healthcare industry is experiencing a long-overdue digital revolution. 74% of American patients used telehealth in 2023, while the size and value of the Internet of Medical Things (IoMT) is...
View ArticleExecutive Guide: Healthcare Risk Management 101
The healthcare industry is undergoing a cybersecurity reckoning – and executives are finally taking proactive steps to tackle the evolving and looming threat of cybercrime. The average healthcare...
View ArticleA Healthcare Security Executive’s Guide to TPRM Software
The healthcare sector’s long-overdue digital revolution has enhanced patient care, communication, and organizational efficiency. But the transformation came with a hidden cost – and leaders have only...
View ArticleHealthcare Cyberattacks: Five Underestimated Risks for Covered Entities
Change Healthcare’s billion-dollar ransomware attack has woken many leaders up to the urgent necessity of stronger cybersecurity. But most media reports focus on only a handful of high-profile risks –...
View ArticleThe Future of Healthcare Cybersecurity: Three Crucial Insights from...
With the threat from cybercriminals growing and the cost of breaches rising, healthcare cybersecurity is no longer just a question of compliance – it is a matter of patient and organizational safety....
View ArticleHIPAA Technical Safeguards: Are You Meeting the Requirements?
There’s a good reason the term “HIPAA headache” resonates with healthcare cybersecurity teams: the sheer complexity of the regulations can make it hard to even know whether your organization is...
View ArticleCommon HIPAA Violation Examples: Avoiding Compliance Mistakes
Few phrases fill healthcare professionals with more anxiety than “HIPAA violation.” From public disgrace to seven-figure fines, the last few years have shown just how serious non-compliance can be for...
View ArticleHIPAA Penalties: Understanding the Consequences of Non-Compliance
The Health Insurance Portability and Accountability Act (HIPAA) is a critical part of any healthcare organization’s compliance program. From annual security risk assessments (SRAs) to ongoing...
View ArticleHIPAA Penalties: Understanding the Consequences of Non-Compliance
The Office for Civil Rights (OCR) has dealt nearly $6 million1 in fines for HIPAA non-compliance in 2024. However, for many healthcare cybersecurity teams, the regulations are highly complex, and the...
View ArticleMastering Risk Management in Healthcare: Strategies for Success
Every healthcare organization understands the importance of reducing risk to protect its patients, reputation, and bottom line. However, putting risk management theories into practice is challenging...
View ArticleQ4 Checkpoint on Cybersecurity in Healthcare: What This Year Has Taught Us So...
The first half of 2024 was a reckoning for healthcare cybersecurity, as threats experts had warned about for years made news headlines. With high-profile ransomware attacks and new legislation...
View Article