Page 171 - Latest interviews and insights on healthcare information security

DDoS Protection

OpUSA: Sizing Up the Threat

Eric Chabrow • May 7, 2013 7 minuates 48 seconds

Mark Weatherford, who recently stepped down as DHS deputy undersecretary for cybersecurity, says that although planned OpUSA DDoS attacks may initially be a nuisance, they represent a genuine long-term threat to the government.

HIPAA/HITECH

HIPAA Omnibus: Marketing and Fundraising

Marianne Kolbasuk McGee • May 7, 2013 19 Minutes

Attorney Helen Oscislawski, a regulatory expert, explains why healthcare organizations must carefully scrutinize their marketing and fundraising policies to prepare for HIPAA compliance.

Business Continuity Management / Disaster Recovery

Addressing DDoS in Risk Assessments

Eric Chabrow • May 3, 2013 9 minutes 51 seconds

In assessing the risk of a distributed-denial-of service attack, organizations must think beyond shoring up systems' perimeters and concentrate on analyzing cyberthreat intelligence, Booz Allen Hamilton's Sedar Labarre says.

Encryption & Key Management

Mobile Security: More Than Encryption

Marianne Kolbasuk McGee • May 1, 2013 10 Minutes

HIPAA-compliance consultant Bill Miaoulis outlines a number of critical steps that many healthcare organizations fail to take to ensure the security of data on mobile devices.

Advanced SOC Operations / CSOC

NIST Unveils Security, Privacy Controls

Eric Chabrow • April 30, 2013 8 minutes 25 seconds

NIST's Ron Ross, a big NASCAR fan, likens new security controls guidance to the tools race-car builders use to prevent drivers from breaking their necks when crashing into a brick wall at 200 miles an hour.

Incident & Breach Response

Mandiant on Nation-State Threats

Tom Field • April 30, 2013 10 Minutes

Security firm Mandiant recently released a widely publicized report detailing cyber-espionage activity originating in China. Mandiant Director Charles Carmakal discusses the latest nation-state threats.

Events

Growing the Global Security Community

Tom Field • April 29, 2013 15 Minutes

When Richard Nealon first sat for his CISSP exam, he was struck by how U.S.-centric the questions were. Since then, he has strived to promote greater awareness of global information security concerns.

Governance & Risk Management

240 Ideas to Secure Critical IT

Eric Chabrow • April 29, 2013 8 minutes, 42 seconds

NIST's Donna Dodson is leading a federal government effort to take hundreds of suggestions from the private sector to create an IT security best practices framework that critical infrastructure operators could voluntarily adopt.

Account Takeover Fraud

Utah Breach: The Potential Costs

Marianne Kolbasuk McGee • April 29, 2013 12 Minutes

Although there have not yet been any confirmed reports of financial fraud associated with a major data breach at the Utah Department of Health last year, the potential for costly fraud is huge, contends Al Pascual of Javelin Strategy and Research.

Attack Surface Management

Cyber-Attacks: The New Maturity

Tom Field • April 25, 2013 15 Minutes

It isn't just the quantity of cyber-attacks that's staggering; it's the quality. The average hacker now has access to nation-state-level attack capabilities, says James Lyne of Sophos. How can organizations defend?

Events

Addressing the Skills Crisis

Tom Field • April 25, 2013 5 Minutes

It isn't a staffing shortage that we face, but rather a skills crisis, says Allan Boardman, international vice president of ISACA. How can organizations build the security skills they need to mitigate evolving risks?

Attack Surface Management

The New Era of Third-Party Risks

Tom Field • April 25, 2013 10 Minutes

Organizations face new cyber-risks from their third-party service providers. But standard contracts fail to cover these risks. Trend Micro's Tom Kellermann discusses the risk management essentials.

Events

Privacy Across Borders

Tom Field • April 24, 2013 5 Minutes

As data protection regulations continue to be refined, organizations throughout Europe are more sensitive to privacy restrictions in individual countries, says Dwayne Melancon, CTO of Tripwire.

DDoS Protection

Why DDoS Attacks Are 'No Big Deal'

Tom Field • April 24, 2013 7 Minutes

Distributed-denial-of-service attacks are increasing against European banking institutions. But UK consultant Mark Child says if banks are worried about DDoS, then they have bigger security problems.

Professionalizing the IT Security Field

Eric Chabrow • April 23, 2013 8 Minutes 29 Seconds

Should IT security practitioners be deemed professionals like those in medicine and law? That's not an easy question to answer, says Ronald Sanders, former human capital officer at the U.S. Office of the Director of National Intelligence.

Interviews

OpUSA: Sizing Up the Threat

HIPAA Omnibus: Marketing and Fundraising

Addressing DDoS in Risk Assessments

Mobile Security: More Than Encryption

NIST Unveils Security, Privacy Controls

Mandiant on Nation-State Threats

Growing the Global Security Community

240 Ideas to Secure Critical IT

Utah Breach: The Potential Costs

Cyber-Attacks: The New Maturity

Addressing the Skills Crisis

The New Era of Third-Party Risks

Privacy Across Borders

Why DDoS Attacks Are 'No Big Deal'

Professionalizing the IT Security Field

Around the Network

Study: 92% of Healthcare Firms Hit by Cyberattacks This Year

Top 'Privacy by Design' Considerations for Medical Devices

Eliminating the Need for Stored Credentials in Healthcare

Who Will Take the Lead in Setting Healthcare AI Regulations?

Gaining Better Visibility Into Medical Devices, IoT, OT

Clinical Considerations When Recovering From Ransomware

Cyber Insurers Are Intensely Scrutinizing Healthcare Clients

Oswal: AI, Platformization Key to Network Security Evolution

Court's Web Tracker Ruling: What HIPAA Entities Should Know

How Mega Attacks Are Spotlighting Critical 3rd-Party Risks