Page 171 - Latest interviews and insights on healthcare information security

Breach Notification

Healthcare Data Breaches: The Gaps

Information Security Media Group • May 24, 2013 10 Minutes

In 2012, ExperianÂ® Data Breach Resolution dealt with 1700 breaches - 800 of them in the healthcare sector. What are the common gaps for organizations looking to comply with new HIPAA Omnibus standards?

Attack Surface Management

Targeted Cyber-Attacks: How to Respond

Tom Field • May 23, 2013 20 Minutes

Facing advanced cyber-attacks, organizations must shift their focus to detection and mitigation, says ISACA's Jeff Spivey, who outlines four capabilities necessary for effective response.

HIPAA/HITECH

HIPAA Audits: The Next Round

Marianne Kolbasuk McGee • May 22, 2013 6 Minutes 21 Seconds

When it resumes, the HIPAA compliance audit program will be more focused in terms of what's evaluated but will encompass a broader range of organizations, says Verne Rinker of the HHS Office for Civil Rights.

Fraud Management & Cybercrime

Logs Paint Picture of Menacing Insider

Eric Chabrow • May 21, 2013 9 minutes 57 seconds

Maintaining accurate logs of systems' activities is crucial in helping catch insiders who threaten an organization's digital assets, says George Silowash, co-author of the Common Sense Guide to Mitigating Insider Threats.

Assessing Breaches: Four Key Factors

Marianne Kolbasuk McGee • May 20, 2013 14 Minutes

Under the HIPAA Omnibus Rule, security incidents are presumed to be reportable data breaches unless healthcare organizations demonstrate through a four-factor assessment that risks are low, explains privacy expert Kate Borten.

Governance & Risk Management

Managing BAs Under HIPAA Omnibus

Marianne Kolbasuk McGee • May 15, 2013 16 Minutes

Under HIPAA Omnibus, business associates are now directly liable for HIPAA compliance. But covered entities need to take steps to ensure their BAs are, indeed, HIPAA compliant, says privacy attorney Stephen Wu.

Governance & Risk Management

Insider Threat Hovering in the Cloud

Eric Chabrow • May 13, 2013 8 minutes 9 seconds

CERT Technical Manager Dawn Cappelli tells a tale of how three individuals, who unexpectedly quit their jobs at a law firm, used a free cloud service to sabotage files containing proprietary client information from their former employer.

Governance & Risk Management

Mitigating Insider Threat From the Cloud

Eric Chabrow • May 9, 2013 10 minutes 51 seconds

Cloud computing providers must step up and develop approaches to prevent their employees from stealing or harming customer data they host, say two experts from Carnegie Mellon University's CERT Insider Threat Center.

DDoS Protection

OpUSA: Sizing Up the Threat

Eric Chabrow • May 7, 2013 7 minuates 48 seconds

Mark Weatherford, who recently stepped down as DHS deputy undersecretary for cybersecurity, says that although planned OpUSA DDoS attacks may initially be a nuisance, they represent a genuine long-term threat to the government.

HIPAA/HITECH

HIPAA Omnibus: Marketing and Fundraising

Marianne Kolbasuk McGee • May 7, 2013 19 Minutes

Attorney Helen Oscislawski, a regulatory expert, explains why healthcare organizations must carefully scrutinize their marketing and fundraising policies to prepare for HIPAA compliance.

Business Continuity Management / Disaster Recovery

Addressing DDoS in Risk Assessments

Eric Chabrow • May 3, 2013 9 minutes 51 seconds

In assessing the risk of a distributed-denial-of service attack, organizations must think beyond shoring up systems' perimeters and concentrate on analyzing cyberthreat intelligence, Booz Allen Hamilton's Sedar Labarre says.

Encryption & Key Management

Mobile Security: More Than Encryption

Marianne Kolbasuk McGee • May 1, 2013 10 Minutes

HIPAA-compliance consultant Bill Miaoulis outlines a number of critical steps that many healthcare organizations fail to take to ensure the security of data on mobile devices.

Advanced SOC Operations / CSOC

NIST Unveils Security, Privacy Controls

Eric Chabrow • April 30, 2013 8 minutes 25 seconds

NIST's Ron Ross, a big NASCAR fan, likens new security controls guidance to the tools race-car builders use to prevent drivers from breaking their necks when crashing into a brick wall at 200 miles an hour.

Incident & Breach Response

Mandiant on Nation-State Threats

Tom Field • April 30, 2013 10 Minutes

Security firm Mandiant recently released a widely publicized report detailing cyber-espionage activity originating in China. Mandiant Director Charles Carmakal discusses the latest nation-state threats.

Events

Growing the Global Security Community

Tom Field • April 29, 2013 15 Minutes

When Richard Nealon first sat for his CISSP exam, he was struck by how U.S.-centric the questions were. Since then, he has strived to promote greater awareness of global information security concerns.