Yesterday’s Cyber Risk is not Today’s Cyber Risk

Yesterday’s Cyber Risk is not Today’s Cyber Risk

Over the past 10 years, the healthcare industry’s understanding of cyber risk has evolved through four distinct phases, emphasizing four different aspects of cyber risk. Understanding these four different phases gives context for where healthcare cyber risk...
HIPAA Privacy Rule: Potential Impacts of Proposed Changes

HIPAA Privacy Rule: Potential Impacts of Proposed Changes

By: Wes Morris, Managing Principal Consultant and Dawn Morgenstern, Senior Principal Consultant This past Thursday, the Office for Civil Rights (OCR) issued a statement of intent to publish a Notice of Proposed Rulemaking (NPRM) proposing to modify the HIPAA Privacy...
5 Keys to Building a Cyber Risk-Aware Culture

5 Keys to Building a Cyber Risk-Aware Culture

Healthcare organizations are experiencing a renewed onslaught of cyber attacks since the advent of the coronavirus pandemic. Hospitals and health systems were already targets of cyber attacks before the pandemic emerged. Now, the rapid shift to remote work and...