Making annual predictions is always a little bit guessing and a lot of luck by the end of the year. No way any of us could have predicted where we would go throughout the year we just call 2020. Only history will tell us will give us the distance to understand the last 12 months. Who knows where we will go next but what the umm heck. We figured we would do it again. More info at HelpMeWithHIPAA.com/287
Jan 15, 2021•1 hr•Ep. 287
A new HIPAA safe harbor rule is out there floating around now. A safe harbor is a legal term that refers to laws and regulations that specify that certain actions will be considered not to violate a given rule. It is often used to clarify big standards like HIPAA. Encryption is one of those things under the breach rules. Do you know about HR 7898? More at HelpMeWithHIPAA/286
Jan 08, 2021•56 min•Ep. 286
A hospital President, after being hit by a cyber attack, said “We really did not anticipate the scope or the impact the attack had on our system and how far-reaching it was.” This is just the beginning. Get prepared for more to come. Especially, with the success of the major SolarWinds infiltration. We knew things were getting worse weeks ago when we recorded this one. Where do we see things going? More at HelpMeWithHIPAA.com/285...
Jan 01, 2021•55 min•Ep. 285
What a year it has been! Say what you will but none of us will EVER forget living through 2020. As we have all adjusted throughout the year we appreciate everyone's continued support of our efforts to educate and entertain. As is our custom, our editor, Bojan, gets his annual 15 minutes of fame. Enjoy his year end Blooper Show edition that gives us a week off and gives him a chance to get back at us for the whole year of crap. More data privacy and security madness coming your way next year whic...
Dec 25, 2020•14 min
The value of the HICP guides is really beginning to be realized as we approach the 2nd anniversary of it's release. Erik Decker, Chief Information Security Officer and Chief Privacy Officer, University of Chicago Medical Center (and 405d Task Force industry lead and co-chair) was kind enough to join us again to discuss what's coming next for HICP and what he sees in healthcare cybersecurity management as we head into 2021. More at HelpMeWithHIPAA.com/284...
Dec 18, 2020•1 hr 10 min•Ep. 284
Amazon is rolling out a new “feature” called Sidewalk. If you have any Alexa devices or certain Ring devices on a network we say get off the Sidewalk! At least until you figure out how it can be secured. More at HelpMeWithHIPAA.com/283
Dec 11, 2020•49 min•Ep. 283
With so much going on this year things that would have been big news are slipping by with little notice. Back in 2016 The 21st Century Cures Act was passed which included a lot of healthcare IT updates to improve patient access to their information. A specific section was all about how to prevent information blocking. What is it, why do you care and when will things happen? That’s the topic today. More at HelpMeWithHIPAA.com/282
Dec 04, 2020•40 min•Ep. 282
Each year we take the week off on Thanksgiving and share a replay of an episode we want to share. This year it seemed appropriate to share our original predictions for 2020 that we did just before the world turned upside down with a pandemic. In a few weeks we will evaluate how we did but for now, catch up on how naive we all were just a few months ago.
Nov 27, 2020•1 hr 12 min
Just because a story isn’t about healthcare or HIPAA doesn’t mean they don’t offer some important news for folks in healthcare to take note. Marriott and Zoom cybersecurity cases were just in the news. We all need to take note of them and pay close attention to what happened. Oh, and there is a new one in healthcare that does include a vendor. More info at HelpMeWithHIPAA.com/281
Nov 20, 2020•49 min•Ep. 281
Every time we think we get ahead of the current news more things happen! More enforcement news, more ransomware specific warnings, more cyber threats to worry about. Let’s get to it! More info at HelpMeWithHIPAA.com/280
Nov 13, 2020•56 min•Ep. 280
Tamika Bass joins us today to discuss the importance of effective communication skills. We have spent a lot of time discussing that it is everyone’s responsibility to participate in cybersecurity protections. One big issue in making that happen is to have tech teams communicate effectively with non-tech teams. As Tamika says “if there is no understanding then communication didn’t happen”. More info at HelpMeWithHIPAA.com/279
Nov 06, 2020•1 hr 2 min•Ep. 279
Hard to believe that we are rolling out our 6th Halloween episode! This year you get to help figure out the costumes at the network office party. Can you guess what all the cyber costumes are saying? More notes at HelpMeWithHIPAA.com/278
Oct 30, 2020•47 min•Ep. 278
More HIPAA COVID examples, another OCR action announced and it is the last week of Cybersecurity Awareness Month. Time to get informed and #BeCyberSmart about connected devices. More info at HelpMeWithHIPAA.com/277
Oct 23, 2020•44 min
We get to week 3 of #BeCyberSmart NCSAM. We had no idea when we made this plan that OCR would start dropping settlements at the same time. After a pretty quiet year they announced more settlements in September than they ever had in a single month before. Again, we have a lot to review! Reminds me of one of my favorite movie quotes: “Life moves pretty fast. If you don't stop and look around once in a while, you could miss it.” Ferris Bueller More info at HelpMeWithHIPAA.com/276...
Oct 16, 2020•59 min•Ep. 276
Our commitment to include #BeCyberSmart each week this month did not anticipate that OCR would set a record for resolution announcements in September. This week we give you info to plan for next week’s activities for NCSAM plus a review of the Athens Orthopedic resolution agreement. A lot to cover! More at HelpMeWithHIPAA.com/275
Oct 09, 2020•59 min•Ep. 275
The first week of National Cybersecurity Awareness Month (NCSAM) 2020 is next week. The theme: If You Connect It, Protect It. How can you use it in your organization? We cover that plus OCR’s 5 resolutions in one announcement reiterating their commitment to patient access rights. For more info: HelpMeWithHIPAA.com/274
Oct 02, 2020•1 hr 2 min•Ep. 274
We missed the boat on National Insider Threat Awareness month in Sept: Insider Threat Mitigation but we are not going to miss NCSAM this year. Do Your Part. #BeCyberSmart and If You Connect It, Protect It. are going to be all over the place here in October. More at HelpMeWithHIPAA.com/273
Sep 25, 2020•40 min•Ep. 273
There is so much going on right now it is hard to keep up. I know there is a lot of activity when we can’t keep an eye on everything! There are several stories that I think we should all be aware of but the big headline one is about HIPAA changes coming in 2020. However, it isn’t the only one about changes that you should be aware of also. More info at HelpMeWithHIPAA.com/272
Sep 18, 2020•52 min•Ep. 272
This episode is the continuation of our Cybersecurity Tales Part 1 last week. We get into more discussions about real world cases involving cyber attacks the team at Black Talon have been called for data breach response. This part is where David really started getting scared! More info at HelpMeWithHIPAA.com/271
Sep 11, 2020•57 min•Ep. 271
Recently we talked with Gary Salman, CEO of Black Talon Security . Our discussion was lively and full of great stories and tips. There was so much there we decided to break this into two episodes. This is part 1 and next week we will share part 2. Let’s get started on cybersecurity tales! More at HelpMeWithHIPAA.com/270
Sep 04, 2020•36 min•Ep. 270
After teaching our 3-day HIPAA Boot Camp we were pretty exhausted. In this episode we are discussing the interesting things David found when reading articles about cybersecurity myths. More info at HelpMeWithHIPAA.com/269
Aug 28, 2020•52 min•Ep. 269
Today we are going to cover what we expected to see start happening after the rush to convert us all to work from home. The discussions about our concern that no one was paying attention except the criminals is starting to come to fruition. More info at HelpMeWithHIPAA.com/268
Aug 21, 2020•1 hr 3 min•Ep. 268
Everywhere we turn this year we are dealing with chaos and stress. Can we all just sing Kumbaya and make it go away? If it was only that easy. Just because craziness has happened doesn't mean HIPAA goes out the window. As we all try to navigate the unknown we can not forget that the criminals thrive on chaos like this. If you aren’t protecting your information a data breach becomes almost inevitable. It is important to understand the data breach costs you are looking at when one occurs. More inf...
Aug 14, 2020•51 min•Ep. 267
These new settlements from OCR should be new required reading. There is very little guessing about their expectations in these CAPs. Specifically mentioning encryption requirements and mobile device management is not ambiguous at all. Things are getting real folks! More info at HelpMeWithHIPAA.com/266
Aug 07, 2020•59 min•Ep. 266
There are plenty of things happening that you should be aware of including a new settlement announcement from OCR . This and more things happening out there you should know about! More info at HelpMeWithHIPAA.com/265
Jul 31, 2020•57 min•Ep. 265
So happy that we are finally doing this show in time to remind you to use the free security awareness training resources available for October which is National Cybersecurity Awareness Month (NCSAM). There are a lot of free resources available to promote security awareness under that program released each year. Today we are discussing how to use these resources to work out a plan for your training through out October! More at HelpMeWithHIPAA.com/264...
Jul 24, 2020•55 min•Ep. 264
The threat of ransomware continues to be a major issue for all businesses. MSPs were a gateway for mass cyber attacks in 2019. Make sure your IT provider is using the new guide specifically for them produced by NIST and NCCoE: PROTECTING DATA FROM RANSOMWARE AND OTHER DATA LOSS EVENTS. While we are at it there are a couple of articles relating to ransomware’s impact on insurance coverage that we need to bring to your attention. More at HelpMeWithHIPAA.com/263...
Jul 17, 2020•52 min•Ep. 263
The annual Verizon data breach report was recently released for 2020. Learning from other’s mistakes is always the best way to learn vs the alternatives. These reports always offer very specific details that we find very enlightening and helpful in making business decisions relating to security in all businesses. More at HelpMeWithHIPAA.com/262
Jul 10, 2020•58 min•Ep. 262
COVID-19 Testing vs HIPAA is starting to play out all over the country as businesses reopen and the virus continues to spread. Today we will discuss some of the confusion about all the COVID-19 testing and HIPAA. More at HelpMeWithHIPAA.com/261
Jul 03, 2020•52 min•Ep. 261
So far 2020 has the whole world turned upside down. A true global pandemic, global economic fallout still happening from a shutdown caused by the pandemic and a level of global social unrest that hasn’t been seen in 40-50 years. Yes, it is overwhelming. But, it is also very clear that the criminal factors and nation-state attackers are well aware no one is watching the hen house too. More info at HelpMeWithHIPAA.com/260
Jun 26, 2020•1 hr 1 min•Ep. 260