Healthcare Cybersecurity

HIPAA Security Compliance

HIPAA Security Compliance: What Most Orgs Get Wrong

A $4.75 Million Fine Started with One Missing Risk Analysis In 2023, Banner Health agreed to a $1.25 million settlement with OCR after

HIPAA Security Certification

HIPAA Security Certification: What It Really Gets You

A compliance officer at a midsize cardiology practice once told me she'd spent $4,200 on a "HIPAA security certification" for

HIPAA Security Certification

HIPAA Security Certification: What It Really Takes

Last year, a compliance officer at a mid-size hospital system in Texas told me she'd spent $14,000 on a vendor's

HIPAA Compliance Testing Services

HIPAA Compliance Testing Services: What Actually Works

The Audit That Costs Less Than the Breach A hospital system in Oregon thought its annual checklist was enough. Internal IT signed off every year.

HIPAA Technology Rule

HIPAA Technology Rule: What Healthcare Orgs Must Know

In December 2023, HHS published a Notice of Proposed Rulemaking (NPRM) that represents the most significant update to the HIPAA Security Rule since its original