Help Me With HIPAA

We get this question all of the time: How do they get in? How do the bad guys get in and attack my network? Seems like a simple question, right? Well there's not always a clear cut answer. The first thing you need to understand is that cybersecurity isn't a problem you solve. It's a chronic condition that you have to manage.

More info at HelpMeWithHIPAA.com/358

Recently, a Cybersecurity Advisory was released worldwide to MSPs and their customers. We will take a look into what this guidance is, how it applies, and what needs to be done about it. This is BIG and we all better be paying attention.

More info at HelpMeWithHIPAA.com/357

Everybody get on board because data security laws keep getting signed in states each year.

The new Maryland and Kentucky data security laws are designed to help protect insurance companies from cyber attacks by implementing cybersecurity standards, developing, implementing, and maintaining a written information security program. Their service providers are also required to implement such programs which include a requirement to report cyber security incidents within 3 days of discovery.

For more details go to HelpMeWithHIPAA.com/356

Incident response planning is important to every business. You don't want to figure out how to manage the business and respond to an incident on the fly. These plans should be reviewed and updated regularly. Today we review a brand new guide from the Healthcare & Public Health Sector Coordinating Council on Operational Continuity - Cyber Incident.

More info at HelpMeWithHIPAA.com/355

Over the last couple years, we've had some high-profile cybersecurity compromises and data breaches. And this trend is not slowing down. Today, we review a recent study of the top cyber threats to healthcare organizations. The results reinforce that PriSec teams require everyone to participate.

More info at HelpMeWithHIPAA.com/354

Recently, we've had a couple things come up which involved tricky places that HIPAA has applied that most people might not think of. So, we thought we'd throw them out there and have a little bit of fun discussing them.

More info at HelpMeWithHIPAA.com/353

Cybercrime is a booming business. In 2021, the US experienced an unprecedented increase in cyber attacks with criminals making $6.9 billion online. In today's podcast, we review the FBI's Internet Crime Report for 2021.

More info at HelpMeWithHIPAA.com/352

It is crucial for every business to understand the security practices of their vendors. And also to make sure that those vendors are vetting their vendors. A cyber attack at a link in your supply chain can drastically affect your business. Evidence: the Okta breach.

More info at HelpMeWithHIPAA.com/351

Have you heard the one about three dentists and a psychiatrist walk into... an OCR investigation? OCR has announced their first set of enforcement actions of 2022, and just in time for our 350th episode. These involve patient right of access and improper disclosure violations.

More info at HelpMeWithHIPAA.com/350

Donna made many notes from the HIPAA Summit. Today, she and David will share six of her top picks, including the difference between an incident and a breach, how a "check the box compliance program" is not a privacy and security program, importance of understanding what your vendor's incident response plans are and more.

More info at HelpMeWithHIPAA.com/349