Pentesting: The Forgotten HIPAA Requirement

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

KPMG will begin HIPAA privacy audits for HHS, ending years of unenforced compliance. The author draws parallels to PCI's rollout and urges healthcare providers to fund privacy and security work.

HIMSS buzzed about "Meaningful Use" requirements for EHR stimulus funds, tying eligibility to HIPAA compliance and risk assessments that must cover all PHI-handling apps and devices, not just EMRs.

I recently had the opportunity to review an article by Michael Koploy of Software Advice titled "HHS Data Tells the True Story of HIPAA Violations in the Cloud".

Many IT folks know that regardless of their respective fields the "unofficial" eighth and ninth layers of the OSI model are budget and politics.

With ambiguity over the definition of ‘creditor’ as it relates to the healthcare environment the American Medical Association (AMA) along with others cried “foul” and threw their challenge flag regarding the FTC’s Red Flag Rule.