Help Me With HIPAA

Episode 21: Where does your fruit hang?

Listen Later

Show Notes

If they were shocked that no one was actually watching for security holes at Ashley Madison you can bet they will be shocked that you haven't been looking because Healthcare is supposed to be private.

Ashley Madison: Nobody was watching

Top 10 Tech Companies with Ashley Madison Accounts

What kinds of things do you need to do to actually be considered looking for them, though?

  • HIPAA Compliant IT
  • Router / Firewall test showed 600% Increase in Unique Vulnerabilities Discovered Last Year (OCR / NIST conference)
    • Within hours or days of a release of software (firmware) vulnerabilities will be identified.
    • Keep firmware up-to-date
    • UTM - what is a UTM
      • not just a router off the shelf at best buy
      • IPS
      • Antivirus
      • Support Subscription!
      • Reporting each month - look at what is going on - if you have IT they can do it but you should be asking them for reports.
      • Printers / Copiers easy for hackers to get to first
        • Smart TVs
        • Patching helps when
        • Hackers
          • Start with "low hanging fruit" 
          • Beginning hackers look for easy challenges to practice their skills
          • Vulnerabilities for sale to each other
          • They just want in to see what you have and then see where they can go
          • Hacktivist - target you because of who works there or who you treat or your type of business
          • There is no way to know how many different parts of software are used from all over the world on any device or in any given application today
            • No list of ingredients on the back of your router or mobile device
            • None of this is new
              • We have all talked about it but no one listening to the security people until it happens at your business, office, or home
              • 10 vulnerabilities account for nearly 97% of all exploits
              • Write little script yourself you could be opening a hole because you don't realize there are security implications to what you just wrote

                • Doctor convicted of illegally accessing medical records Doctor having an affair and looked at the mistress' medical records. Looking to see if she had STDs. Plead guilty in federal court and kept his license but must be monitored.

                ...more
                View all episodesView all episodes
                Download on the App Store
                Help Me With HIPAABy Donna Grindle and David Sims
                • 4.9
                • 4.9
                • 4.9
                • 4.9
                • 4.9

                4.9

                61 ratings

                More shows like Help Me With HIPAA

                View all
                This Week in Tech (Audio) by TWiT

                This Week in Tech (Audio)

                3,014 Listeners

                The Ramsey Show by Ramsey Network

                The Ramsey Show

                38,704 Listeners

                Wait Wait... Don't Tell Me! by NPR

                Wait Wait... Don't Tell Me!

                38,649 Listeners

                Radiolab by WNYC Studios

                Radiolab

                43,909 Listeners

                The Joe Rogan Experience by Joe Rogan

                The Joe Rogan Experience

                225,807 Listeners

                CyberWire Daily by N2K Networks

                CyberWire Daily

                1,006 Listeners

                Juicy Scoop with Heather McDonald by Heather McDonald & Studio71

                Juicy Scoop with Heather McDonald

                25,558 Listeners

                The Jordan B. Peterson Podcast by Dr. Jordan B. Peterson

                The Jordan B. Peterson Podcast

                34,045 Listeners

                This Past Weekend w/ Theo Von by Theo Von

                This Past Weekend w/ Theo Von

                27,214 Listeners

                Darknet Diaries by Jack Rhysider

                Darknet Diaries

                7,871 Listeners

                CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

                CISO Series Podcast

                187 Listeners

                All-In with Chamath, Jason, Sacks & Friedberg by All-In Podcast, LLC

                All-In with Chamath, Jason, Sacks & Friedberg

                9,095 Listeners

                The MeidasTouch Podcast by MeidasTouch Network

                The MeidasTouch Podcast

                44,368 Listeners

                SmartLess by Jason Bateman, Sean Hayes, Will Arnett

                SmartLess

                57,908 Listeners

                The Dr. John Delony Show by Ramsey Network

                The Dr. John Delony Show

                7,093 Listeners