SCIDSA has been around for a year now. Enough time that agencies everywhere should be just about fully implemented. Unfortunately, this is not the case. More often than not, we see that local agencies are not anywhere near compliant. This list covers the 5 biggest mistakes we have seen at Read more…
South Carolina Insurance Data Security Act The South Carolina Insurance Data Security Act (SCIDSA) is a data security/compliance law targeting insurance industry-related businesses operating in South Carolina and those persons licensed to operate by the South Carolina Department of Insurance (DOI). The SCIDSA was passed by the General Assembly on Read more…
Organizations are being breached every day at an outstanding rate. Hackers typically do not discriminate on the size of the organization, but rather focus on how soft the target is. In layman’s terms, this means how easy it is to get around a target’s security. Most people mistakenly believe that Read more…
Businesses often mistakenly believe they will not be targeted or that they will know when they are attacked immediately. These are deadly myths that will leave organizations unprepared for the threats out there. This week we discuss the fallacies of these beliefs and how businesses can transcend these old thoughts Read more…
Many times, as an Information Security Professional I forget that somethings aren’t common knowledge to my customers. I live in this cyber security world 24/7 but they just dip their toes in the water occasionally. This week we are going to get down to the basics like Vince Lombardi Read more…
One of the amazing questions I received this week was about layered security. “What does that look like Micheal?” This week I’ll break down common ways for small businesses to implement multiple levels of security into their business networks to stop the cyber bad guys. Text book definition At Read more…
This week, I decided I’d like to take a break from the educational blogs Tandem has been doing and get a little personal. I want to introduce our new meetup group, “Charleston HIPAA and Healthcare Risk Management Meetup” and I wanted to tell the story behind the group. Starting Read more…
A HIPAA compliance program looks different from one organization to the next, depending on their specific needs. Although varied, each program goes through a similar cycle that I will outline in this week’s blog. Keep in mind, the cycle typically repeats on a yearly schedule as mandated by HIPAA. Read more…
The assumed answer is HIPAA. To clarify, HIPAA is an act and not a governing body of any sort. HIPAA’s rules and regulations are enforced by the U.S. Department of Health & Human Services (HHS) and their Office for Civil Rights (OCR). Besides Attorney Generals, other entities cannot enforce Read more…
An organization who is HIPAA compliant has completed the appropriate audits, documented appropriate policies, had a qualified expert conduct a risk assessment, trained employees on how to handle patient data, ensured vendors were HIPAA compliant and enforced diligent security practices. Does this sound like your business? Chances are that if Read more…