Organizations are being breached everyday at an outstanding rate. Hackers typically do not discriminate on the size of the organization, but rather focus on how soft the target is. In layman’s terms, how easy they can get around the security. Most people mistakenly believe that when they are breached, they Read more…
Businesses often mistakenly believe they will not be targeted or that they will know when they are attacked immediately. These are deadly myths that will leave organizations unprepared for the threats out there. This week we discuss the fallacies of these beliefs and how businesses can transcend these old thoughts Read more…
Many times, as an Information Security Professional I forget that somethings aren’t common knowledge to my customers. I live in this cyber security world 24/7 but they just dip their toes in the water occasionally. This week we are going to get down to the basics like Vince Lombardi Read more…
One of the amazing questions I received this week was about layered security. “What does that look like Micheal?” This week I’ll break down common ways for small businesses to implement multiple levels of security into their business networks to stop the cyber bad guys. Text book definition At Read more…
This week, I decided I’d like to take a break from the educational blogs Tandem has been doing and get a little personal. I want to introduce our new meetup group, “Charleston HIPAA and Healthcare Risk Management Meetup” and I wanted to tell the story behind the group. Starting Read more…
A HIPAA compliance program looks different from one organization to the next, depending on their specific needs. Although varied, each program goes through a similar cycle that I will outline in this week’s blog. Keep in mind, the cycle typically repeats on a yearly schedule as mandated by HIPAA. Read more…
The assumed answer is HIPAA. To clarify, HIPAA is an act and not a governing body of any sort. HIPAA’s rules and regulations are enforced by the U.S. Department of Health & Human Services (HHS) and their Office for Civil Rights (OCR). Besides Attorney Generals, other entities cannot enforce Read more…
An organization who is HIPAA compliant has completed the appropriate audits, documented appropriate policies, had a qualified expert conduct a risk assessment, trained employees on how to handle patient data, ensured vendors were HIPAA compliant and enforced diligent security practices. Does this sound like your business? Chances are that if Read more…
A complex set of regulations like HIPAA requires constant work to keep up to date within an organization. With requirements ranging from six unique audits per year to training to vendor management, it is not a task that most healthcare organizations can devote the time to. An organization must be Read more…
HIPAA rules have been applied by the federal government to protect the data of customers, patients, and users. The introduction and enforcement of HIPPA has stemmed the flood of data breaches in business organizations and the criminals who profit from selling customer data to other companies and nefarious individuals. Read more…