Episode 15: It's not just about HIPAA anymore

In 2014 NIST introduced the National Cybersecurity Framework (CSF). It is designed for all businesses, large and small, to know things they should be doing to protect their businesses, data, customers, and more. Just how does it compare to HIPAA?

NIST Cybersecurity Framework

DHS Getting Started for Small and Midsize Businesses (SMB)

US Chamber of Commerce: Internet Security Essentials for Business 2.0

C3 Voluntary Program: Begin the Conversation: Understand the Threat Environment

FindHealthcareIT

HIPAAforMSPS.com

Kardon Compliance

It's not just HIPAA. All the different guides spell out the same basic concepts.For example:

• NIST - Cybersecurity Framework
• US Chamber of Commerce: Internet Security Essentials for Business 2.0
  • STRONG SECURITY IS SMART FOR BUSINESS AND THE NATION COMMON THREATS TO BUSINESS INFORMATION
  • Hacking and Malware
  • Lost or Stolen Physical Storage Media
  • Insider Threat and Human Error
  • Accidents and Natural Disasters
  • CYBERCRIME ON THE RISEINTERNET SAFETY AND SECURITY FUNDAMENTALS
  • Set Up a Secure System
  • Protect Business Data
  • Train Your Workforce
  • Be Prepared
  • ADD BUSINESS VALUE THROUGH INFORMATION SECURITY
  • NATIONAL AND PRIVATE SECTOR PERSPECTIVES

Cyber Essentials to Protect Your Business: Managing Cyber Risks in a Time of State and Non-State Threats to Business Security and Resilience - Hosted by US Chamber of Commerce

• FBI - Deputy Director
• DHS - Undersecretary for Cybersecurity
• Secret Service - Atlanta Office Cybersecurity Team
• Army Lt Col - Cybersecurity Command