The Federal Health IT Strategic Plan and the Final Four
Strategic planning and basketball go together like wine and cheese.
RSA Breach – What Can Be Learned
While information around this attack and its impact on customers is lacking (RSA is citing an ongoing investigation as a reason to limit public disclosure) a couple of lessons about general security management can be learned.
A “Reasonable” Approach to HIPAA Risk Analysis
With so much recent interest in IT security driven by the “meaningful use” incentive program, we want to share some our observations and perspectives from recent Redspin client engagements in the healthcare industry.
Get a Meterpreter Shell Using SMB Credentials
The Meterpreter shell in Metasploit is a fantastic way to interact with a compromised box. It runs entirely in memory and leaves no trace of itself after you disconnect, allowing you to pillage and plunder cleanly without leaving any tracks.…
HIPAA Enforcement Training for State Attorneys General – Is this a good thing or bad?
Whereas before the HITECH Act HIPAA was seen as having no teeth, in part due to the lack of enforcement resources available, bringing cash strapped state-resources into the picture could change the compliance landscape considerably.
A Systematic Approach to Managing Business Associate Risk
The process in this article can systematically reduce risk in a rapid and cost-effective manner with a repeatable process that ensures accountability and documents an organization's dedication to a robust information security program.
Charleston Area Medical Center (CAMC) Data Breach – What Can Be Learned?
It's always educational to review a data security breach to see what can be learned. In the case of the Charleston Area Medical Center (CAMC) last month a number of lessons can be learned. First lets review what we know…
Managing HIPAA / HITECH Act Risk in ePHI Supply Chain
HITECH and the notice of proposed rule making (NPRM) published in the Federal Register July 14, 2010 significantly impact how Covered Entities (CEs) and Business Associates (BAs) manage health IT security risk under HIPAA.
Managing Windows User Accounts via the Commandline
Just hacked a box on a penetration test but can't get a Meterpreter shell on it for some reason? Follow these steps!