Compliance and Cyber Risk Management Blog

Understanding Insider Threats and How to Protect Your Organization

February 26, 2021

Insider threats across many industries are on the rise, and there’s no immunity for healthcare.

Key Things to Know About Proposed HIPAA Privacy Rule Changes

February 19, 2021

If the proposed changes become the final rule, the effective date will be 60 days from publication of the final rule.

How Enterprise Cyber Risk Management Can Facilitate Compliance Efficiency

February 2, 2021

HIPAA is not the only law that addresses data privacy and security within the healthcare industry.

EHRs and Ransomware: Protecting Your Crown Jewel

January 15, 2021

Throughout this past fall, international criminal organizations asserted their dominance over the healthcare sector through ransomware.

Getting Proactive about the Ransomware Threat

January 11, 2021

Throughout this past fall, international criminal organizations asserted their dominance over the healthcare sector through ransomware.

Yesterday’s Cyber Risk is not Today’s Cyber Risk

January 5, 2021

Over the past 10 years, the healthcare industry’s understanding of cyber risk has evolved through four distinct phases, emphasizing four different aspects of cyber risk. Understanding these four different phases gives context for where healthcare cyber risk began and where it is now.

HIPAA Privacy Rule: Potential Impacts of Proposed Changes

December 14, 2020

This past Thursday, the Office for Civil Rights (OCR) issued a statement of intent to publish a Notice of Proposed Rulemaking (NPRM) proposing to modify the HIPAA Privacy Rule.

Advancing Cyber Risk Management in our Nation’s Hospitals

November 30, 2020

The threat landscape and attack surface are evolving rapidly, and the healthcare ecosystem is becoming more interconnected. While some healthcare providers are systematically analyzing and responding to risks across the enterprise, the majority are not.