New guidance from the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) requires cloud service providers (CSP) that store patient information to be HIPAA compliant. While CSPs have typically been treated as business associates when electronic…
Ransomware is not a new cybersecurity threat; it has been around for over a decade. But the growing sophistication of this malicious scheme and increasing frequency of attacks have security professionals and law enforcement concerned. In 2015, the FBI issued…
Beginning on February 5, 2016 hackers seized control of Hollywood Presbyterian Medical Center’s (HPMC) data systems using sophisticated encryption technology in one of the largest ransomware attacks ever. The hackers then contacted the hospital’s staff and demanded an undisclosed monetary…
Google's founders, Sergey Brin and Larry Page, were recently asked at a conference if they could imagine Google becoming a healthcare company. They both said "no" and explained their reasoning as follows. Brin felt the regulatory obstacles would "dissuade a…
Submitted by David Carlino Mobile devices are designed to store less data than traditional laptops and desktop workstations. Cloud-based storage continues to enable a steady migration away from local device storage. Due to local storage limits, mobile users are increasingly…
The key to Redspin’s rapid rise as the leader in HIPAA compliance for healthcare providers has been our unyielding focus on IT security. Last week’s news that OCR had reached a $4.8 million settlement agreement with New York-Presbyterian hospital and…
The 2009 HITECH Act deputized the Office of Civil Rights (OCR) to conduct HIPAA security audits under the auspices of the Department of Health and Human Services' (HHS). But as it turns out, OCR is not the only HIPAA enforcer…
A Mobile Device Management (MDM) solution is a single security tool that must work in concert with many other IT operations to achieve information security. Choosing the right MDM requires significant forethought. Implementing all the controls correctly for all end-users…
