Blog
We know you have many questions. That’s why our team has curated top-notch resources to help you along your healthcare cybersecurity and compliance journey.
Compliance & Cybersecurity & Risk Management Blogs from Industry Experts
Filter by Topic:
- All
- Cyber Risk Management
- Cybersecurity
- Privacy
- Digital Health
- HIPAA
- Security Management
- Medical Device Security
- Cyber Briefing
- OCR Enforcement
- Threat Information
- Compliance
- Risk Analysis
- Vendor Risk Management
- Cloud
- CMMC
- Artificial Intelligence
- NIST-800-171
- Resiliency
- HITRUST
- Security Control Validation
- Incident Response & Planning
- Due Diligence
- Vulnerability Management

JPM 2026 Takeaways: Cybersecurity in Healthcare PE Diligence
The 2026 J.P. Morgan Healthcare Conference reinforced a familiar but increasingly disciplined theme among ...

Cyber Risk in Healthcare Is Entering a New Phase
A conversation with Greg Garcia
For much of the past decade, cyber risk in healthcare has been defined by ...

OCR’s 2026 Cybersecurity Update to Healthcare: From Risk Analysis to Enforced Risk Management
January 2026 OCR Update:
In its January 2026 Cybersecurity Newsletter, the HHS Office for Civil Rights (OCR) ...

Healthcare Cybersecurity Basics: What CISOs Worry About at 3 A.M.
Tom Bunger, Fronz Batot, Cary Brown
I was talking recently with the CISO of a large health system and I asked him: ...

Health Care Cybersecurity and Resiliency Act of 2025: What It Signals for Healthcare Security
The reintroduction of the Health Care Cybersecurity and Resiliency Act of 2025 shows that Congress continues to ...

Why Web & Mobile App Pen Testing Is Critical in Healthcare
By Oluwole OkunseindePrincipal Consultant, Technical Testing Services
In today’s healthcare environment, the line ...

Turning Cybersecurity into a Culture of Trust at Cleveland Clinic
How a unique business liaison role is helping clinicians, executives, and cybersecurity teams speak the same ...

The Perennial Cybersecurity Problem: Tool Proliferation and the Talent Crisis
By: Larry Mraz, CISSP, CRISC, CHPP, CISM, CISA, BCMS
vCISO/Principal Consultant
Cybersecurity is at a breaking ...

The Human Factor: Why Phone Scams Are Still So Effective in Healthcare
By Sebastian Pina, OSCP, OASP, PNPT, PWPA, Security+Senior Consultant, Technical Testing ...

New York’s Updated Cybersecurity Regulations: The Final Compliance Deadline Arrives October 2nd
Cyberattacks targeting healthcare organizations have been on the rise, and New York State is stepping up its defenses. As of October 2, 2024, new cybersecurity regulations are in effect for general hospitals in the state, marking a significant step forward in protecting sensitive patient data and ensuring the operational resilience of healthcare facilities.

AI Prompt Injection in Healthcare: The Real Cyber Risk Hiding in Plain Sight
How clever text inputs can turn your AI assistants into security vulnerabilities
By Philip Burnham, PNPTPrincipal ...

Cross-Site Scripting (XSS): More Than a Pesky Alert
It is likely you have seen the number 1 in an alert box if you have ever had a penetration test performed on your web application. The alerted number is the most common proof-of-concept for Cross-Site Scripting.
No results found.
