Prioritize Compliance for Your Business

One of the many challenges you probably face as a business owner is dealing with the vague requirements present in HIPAA and PCI-DSS legislation. Due to the unclear regulatory messaging, “assuming” rather than “knowing” can land your organization in hot water with regulators.

The Health and Human Services (HSS) Office for Civil Rights receives over 1,000 complaints and notifications of HIPAA violations every year.1 When it comes to PCI-DSS, close to 70% of businesses are non-compliant.2 While you might assume it’s okay if your business does not comply with HIPAA or PCI-DSS since many other companies are non-compliant as well, we can assure you it’s not. Keep in mind that being non-compliant puts you and your business at risk of being audited and fined.

Attention, Attention… This is not a Drill!

Recently a major Health Insurance Provider sent out a “Security Due Diligence Questionnaire” to all of its partners and vendors. If you work in the health insurance industry and received this notification, this request may have come to you as quite a shock.

Paging Doctor Google… Doctor Google, Please Report “Everywhere”.

Initially reported by the Wall Street Journal and corroborated by the New York Times, Google and health care provider Ascension (the second-largest managed health system in the U.S.) initiated “Project Nightingale” last year in the shadows of ominous secrecy.

Are IoT devices allowing access to your data?

Does your business use “Smart” TVs, “Smart” Monitoring Systems, or any other type of  Internet of Things (IoT) “Smart” devices? Then be well aware, these devices may be spying on you and stealing your data!