View Post

How to Prevent Third-Party Cybersecurity Risks

In Technology by Chad KissingerLeave a Comment

  Risk management, compliance, and security are a shared burden between your organization and your vendors. Standards such as NIST (Publication 500-292) and regulations like HIPAA and PCI-DSS provide considerations for compliance and security but do not account for the nuances of your unique business or your infrastructure. To make matters more complicated, guidelines are written as though one party is responsible …

View Post

HIPAA Guidelines: Understanding Compliance in the Cloud 

In Cloud by Kirk WrightLeave a Comment

Learn about the HIPAA guidelines and gain a better understanding of how you and your IT provider play a part in cloud compliance. The international healthcare cloud computing market is projected to rise to a valuation of nearly $9.5 billion in 2020—an annual growth rate of 20.5%. For organizations that manage, store or transmit electronic protected health information (ePHI) and …

View Post

HIPAA Security and Awareness Training: An Integral Part of the Compliance Strategy

In Security by Kirk WrightLeave a Comment

When it comes to implementing a robust security protocol, employee training is one of the most critical—and often overlooked—aspects of a solid plan. Security and awareness training is also an integral part of HIPAA compliance.  But, according to a recent HealthITSecurity.com review of NueMD’s 2016 HIPAA Survey Update: “Healthcare organizations are also falling behind on annual HIPAA training. Currently, 58 …