Compliancy Group

APRIL 29, 2022

People click on links in emails promising “free $100 Amazon gift cards” that secretly install malware, spyware, or ransomware. That starts by having effective policies and procedures to govern the use and access of PHI within your organization. Do you take the time to do real due diligence on what they deliver?

HIPAA 52

HIPAA Compliance Due Diligence Ransomware 52

HIT Consultant

DECEMBER 28, 2023

Hospitals, for example, have increasingly been the target of malware and ransomware attacks. Third-Party Vendor Assessment: Due diligence is required to thoroughly vet third-party vendors and their cybersecurity practices. Traditional security measures are better positioned to manage AI-related threats from cyber-criminals.

US Department of Health and Human Services 107

US Department of Health and Human Services Due Diligence Regulatory Compliance Compliance 107

HIPAA Journal

MARCH 9, 2022

This point has been reinforced through several subsequent HHS publications – most notably a recent Fact Sheet that answers questions about ransomware and whether or not a ransomware attack is a reportable breach under the HIPAA Breach Notification Rule. Privacy Rule HIPAA Safeguards.

HIPAA 113

HIPAA Due Diligence Ransomware Compliance 113

HIT Consultant

DECEMBER 26, 2021

Government mandates were an impetus for change, starting with the Health Information Technology for Economic and Clinical Health (HITECH) Act, enacted as part of the American Recovery and Reinvestment Act (ARRA) of 2009 to “promote the adoption and meaningful use of health information technology” (Office of Civil Rights (OCR), 2017).

Due Diligence 98

Due Diligence Compliance HIPAA Nurses 98