Compliance and Information Risk Management Blog

During a conversation over drinks with a number of CIOs at a recent healthcare conference, I discovered that the number one concern that keeps most healthcare executives up at night is the security of their medical devices. That was somewhat...

Is there a more challenging position anywhere in information security than that of a healthcare organization’s cyber risk management leader? If there is, I can’t think of what it would be. Whether your title is CISO, CSO, CTO, CIO or some...

Every day, it seems, cyber criminals figure out new ways to attack hospitals and compromise patient data and safety. As the number and intensity of cyber attacks on healthcare organizations increase, the task of establishing an effective...

Healthcare CIOs, CISOs, and other information risk management leaders face daunting challenges when it comes to deciding where to apply their limited resources to make the biggest difference in their organization’s cyber risk posture. As I...

You’re the CISO of a healthcare organization and you just sat through an amazing sales presentation by one of your security vendors. You are considering cutting a PO to purchase that new security tool. You’ve been thinking for some time about...

HIT Think - How cyber risk is affecting medical professional liability

3 Things That Healthcare Must Understand About Cybersecurity

I wrote a blog almost exactly one year ago that outlined the years of regulatory attempts to increase cybersecurity by requiring disclosures of risk factors, strengthening Board oversight and various legislation related to cyber security. It’s...

Marianne Kolbasuk McGee just reported that Roger Severino, HHS OCR Director, has told ISMG that there will be no Phase 3 HIPAA compliance audits, rather the information gleaned from the Phase 2 Audits will be analyzed for “putting them into a...