Prompted by Heartbleed and other vulnerabilities, the White House is giving the Department of Homeland Security authority to conduct regular and proactive scans of federal civilian agency networks.
eBay has filed a motion to dismiss a class action lawsuit filed against the company in July following a breach earlier this year. Find out why the company says the lawsuit has no merit.
"Selling spyware is not just reprehensible, it's a crime," says a U.S. Justice Department official. So why are 245 local U.S. law enforcement agencies and prosecutors giving spyware away for free?
A bill introduced in the U.S. House would require that new privacy measures be implemented on the HealthCare.gov website for Obamacare to give consumers more control over their personal data.
Legislation signed into law Sept. 30 by California Governor Edmund Brown Jr., which amends the state's data breach notification law, contains far fewer new requirements than originally proposed.
Considering healthcare's recent track record of frequent data breaches, organizations must take steps to mitigate the risks posed by the Bash flaws known as Shellshock now to help avoid becoming the next victim of a hacker attack.
A dispute involving an EHR vendor that allegedly locked out a small clinic's access to patient data illustrates why healthcare organizations need to carefully scrutinize the HIPAA-related fine print in their business associate contracts.
The automated version of the IT risk management and governance framework should save project leaders 30 to 60 hours of work over a manual process of building a secure IT system, ISACA President Robert Stroud says.
Federal regulatory agencies have several activities and resources in the works as the healthcare sector enters year two of a post-HIPAA Omnibus Rule enforcement environment. Find out what's planned.
Jocelyn Samuels, who recently became the nation's top HIPAA enforcer, is sending a strong message: Conduct a security risk analysis to help prevent breaches, or face enforcement consequences.
In the year since federal regulators began enforcing the HIPAA Omnibus Rule, there's been a huge spike in the number of major breaches reported. What's behind the surge?
One year after HIPAA Omnibus Rule enforcement began, why do so many healthcare entities and business associates continue to struggle with even the most basic requirements? Security expert Andrew Hicks offers insights.
Legislation that aims to help the Department of Homeland Security recruit and retain cybersecurity professionals is one step closer to becoming law now that it won unanimous approval in the Senate.
Federal regulators have released guidance to educate healthcare entities and business associates about how the HIPAA Privacy Rule applies to married same-sex couples.
A congressional hearing scrutinizing Tiversa, the peer-to-peer security firm that's at the center of the ongoing data security dispute between medical test lab firm LabMD and the Federal Trade Commission, has been postponed until November.
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing healthcareinfosecurity.com, you agree to our use of cookies.