Reporting requirements of New York’s SHIELD Act go into effect on October 23; healthcare organizations that collect or use personal or private data from state residents will need to be in compliance.
Developed with industry leaders like Clearwater Compliance, Symantec, and others, new NIST guidance and a proposed project could help health delivery organizations secure the PACS ecosystem.
Every organization should understand their own unique risk profile based on the impact to their organization of a breach, the vulnerabilities that exist within their unique portfolio of information assets and all reasonable threats that might exploit those vulnerabilities including insider threats.
Company’s IRM|Pro Software Prepares Students to Meet Healthcare Industry’s Need for Professionals Skilled in Enterprise Cyber Risk Management Aug. 22, 2019 NASHVILLE, Tenn. (Aug. 22, 2019) – Clearwater, the leading provider of cyber risk management and HIPAA...
Efforts by the federal Office of Civil Rights to investigate data breaches at healthcare organizations are of great concern to security and compliance officers at healthcare organizations.
Jon Moore, Chief Risk Officer at Clearwater Compliance LLC, based in Nashville, Tennessee, said the survey essentially reflected what he sees in the industry.
Although the healthcare industry has been notoriously resistant to change, its transformation at the hands of digitization has recently picked up pace.
Olean Medical Group CEO Christine Strade received a text June 11 telling her the group’s electronic medical record system was down. That’s how she learned her company had been cyber-attacked.
Every CISO knows that April, 2019 was a grim milestone: the worst month for healthcare data breaches
since 2010, when the Office for Civil Rights began reporting healthcare data breaches of 500 individuals
or more publicly. In April, 44 breaches were reported and the medical records of nearly 700,000 people
were compromised.
A new report from KLAS and CHIME find that while large organizations are becoming more sophisticated in their cybersecurity strategies, smaller providers are not keeping pace with governance, risk management, and other security elements.