The 405(d) Chronicles is a platform for sharing firsthand insight, lessons learned, and perspectives from cybersecurity professionals in the field today.
The 405(d) Post
read more
Cyber-risk management moves up a gear in PE
As cyber-risks facing private equity firms in the healthcare sector continue to escalate, managers need to take a more holistic approach, says Jon Moore, chief risk officer and head of consulting services at Clearwater
Patient Cyber Harm: Strategies and Tips for Prevention, Preparation, Risk Management, and Transparency
Cyber events put patients at risk and affect overall patient safety. Cathie Brown, Vice President, Consulting Services, Clearwater, speaks with Sean Sullivan, Partner, Alston & Bird LLP, Gerard Nussbaum, Principal, Zarach Associates LLC, and Elizabeth Hodge,...
Advancing Your Cybersecurity Practices Through 405(d)
This presentation is a recording of a web event given on 1/19/2022 by Clearwater Senior Principal Consultant, Adam Nunn Overview As organizations look to invest more in cybersecurity, we recommend they build their program on a recognized framework. The NIST...
FTC Health Breach Notification Rule: Expanding Scope and Enforcement
In August 2009, the Federal Trade Commission (FTC) issued the Health Breach Notification Rule (Breach Rule), which requires vendors of personal health records and related entities to provide notice to consumers following a breach. After over a decade without any...
Clearwater Rated Healthcare’s Top Security Advisor and Compliance and Risk Management Solution
Ranking in Black Book’s Survey of Nearly 3,000 Security and IT Professionals Affirms Breadth and Strength of Company’s Expertise and Capabilities
HIPAA Security Rule Compliance: A Discussion with Former OCR Director Roger Severino
In statements throughout his tenure as Director of HHS' Office for Civil Rights from 2017-2021, Roger Severino was repeatedly critical of organizations for not performing a risk analysis or taking action to mitigate identified risks, as required by the HIPAA Security...
Tech Vendor Email Breach Affects Dozens of Health Entities
Incident Is Latest Reminder of Business Associate Security Risks
Technical Testing and the HIPAA Security Rule: What’s Needed to Protect Your Healthcare Organization
Introduction The HIPAA Security Rule, is a set of national standards designed to help organizations protect PHI that’s created, received, used, or maintained by a healthcare covered entity, with compliance expectations that extend to business associates as well....
How Physician Groups Can Overcome Common Cybersecurity and HIPAA Compliance Challenges
Introduction Across the healthcare industry, large physician groups are becoming increasingly common, as investors bring disparate physician practices together to keep up with healthcare challenges and ever-more complex treatment and service delivery needs. Today,...