Building an Effective Vendor Risk Management Program

Building an Effective Vendor Risk Management Program

By Dawn Morgenstern and Katie Sullivan Late last month, news broke of a ransomware attack on an EHR provider that impacted a NY-based home health chain Personal Touch Home Care. The attack is one of many recent cyber incidents involving vendors that provide crucial...
Making Cyber Risk Management an Ongoing Process

Making Cyber Risk Management an Ongoing Process

The HIPAA Security Rule1, as well as the National Institute of Standards and Technology (NIST) and other standards, stipulate that a risk analysis and risk management process should be ongoing, and not performed at a single point in time. However, many healthcare...