News & Analysis

January 2, 2017
Briefings on HIPAA

In today's world, passwords are no longer enough. Organizations should double up on security and implement two-factor authentication to stay ahead of the increasing volume and sophistication of cyberattacks. Although some may worry that two-factor authentication will be difficult to use, savvy organizations have found that it quickly becomes second nature.

December 28, 2016
Briefings on HIPAA

Breaches and audits brought much needed attention to HIPAA

December 26, 2016
Briefings on HIPAA

Q. Are we required to use encryption on all email, or only email that contains PHI?

December 12, 2016
Briefings on HIPAA

Information security officers often have their hands full with HIPAA. But as high-deductible health plans have patients paying more out of pocket, it’s time organizations took a closer look at another set of cybersecurity guidance: the Payment Card Industry Data Security Standard (PCI DSS).

December 1, 2016
Briefings on HIPAA

It’s been a challenging year for HIPAA compliance. OCR levied more than $20 million in breach settlement fines. Ransomware rocked the healthcare industry.

October 1, 2016
Briefings on HIPAA

Social media is everywhere—even inside the walls of hospitals. Staff may log into personal accounts during lunch breaks, and many organizations maintain official social media accounts; plus, of course, patients and visitors often rely on social media to keep in touch with friends and family. For many, social media is so much a part of their everyday routine that the benefits are almost too obvious to list. Yet the risks—including potential HIPAA violations—are often not as clear, and privacy and security officers need to stay aware of them.

Pages