Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Regulatory FrameworkAn $800K OCR settlement exposes five common risk analysis myths that lead to costly HIPAA violations, emphasizing the need for thorough, proactive risk management.
Breach NotificationOracle Health exposed 20 million patient records during a migration due to overlooked staging servers, highlighting critical security gaps in data transitions.
Breach NotificationThese questions landed in my inbox last week after news broke that Ambry Genetics agreed to pay a $700,000 HIPAA fine for a 2020 phishing incident that exposed the information of 225,000 patients. The
Breach NotificationThe common belief is that settling data breach lawsuits is a smart business move. It avoids lengthy litigation, caps exposure, and allows you to move on. Central Maine Medical Center and Susan B. Alle
Get weekly security insights and compliance updates delivered to your inbox.
HITRUST CSF & ScoringYou re facing a question that sounds binary but isn t: which assurance framework does your organization actually need? The answer depends on three variables: who you serve, what data you handle, and h
Administrative SafeguardsYour organization s compliance program should operate like infrastructure, not an annual project. This guide provides the technical framework and reference points to build continuous compliance operat
Regulatory FrameworkCompliance officers are hearing the same refrain from every vendor, consultant, and conference keynote: AI is reshaping security faster than you can update your policies. That s partly true. But the m
