2 min read
Tshedimoso Makhene: Nov 6, 2024 3:12:42 AM
Business associates are not required to give individuals direct access to their protected health information (PHI). However, they must assist the covered entity in providing access when an individual requests. The covered entity is ultimately...
Read More
3 min read
Tshedimoso Makhene: Nov 5, 2024 4:47:50 PM
The US Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance to help operators...
2 min read
Tshedimoso Makhene: Nov 5, 2024 1:43:59 PM
Canadian law enforcement has arrested Alexander Moucka, a suspect in a significant cyberattack that compromised the data of numerous Snowflake...
2 min read
Tshedimoso Makhene: Nov 5, 2024 7:34:08 AM
Blood banks are generally not bound by HIPAA, but they adhere to FDA regulations, state privacy laws, and their own confidentiality policies to...
2 min read
Tshedimoso Makhene: Nov 4, 2024 4:59:24 PM
Electronic business associate agreements (BAAs), signed with an electronic signature, are permissible under the HIPAA Privacy Rule if they meet all...
2 min read
Tshedimoso Makhene: Nov 4, 2024 3:30:14 PM
Cybersecurity performance goals (CPGs) are a set of cybersecurity best practices and minimum-security standards developed by the Cybersecurity and...
2 min read
Tshedimoso Makhene: Nov 4, 2024 3:20:38 PM
Machine-in-the-middle attacks, often called "man-in-the-middle" (MitM) attacks, occur when an attacker intercepts communication between two parties...
2 min read
Tshedimoso Makhene: Nov 4, 2024 3:45:00 AM
Network segmentation is a security practice that involves dividing a computer network into smaller, manageable sub-networks (segments). This approach...
2 min read
Tshedimoso Makhene: Oct 31, 2024 1:30:18 PM
Access controls are the security protocols and measures that determine who can access specific resources, systems, or information within an...
2 min read
Tshedimoso Makhene: Oct 30, 2024 4:01:47 PM
At the recent joint HHS and National Institute of Standards and Technology security conference, HHS OCR senior advisor for health information...
2 min read
Tshedimoso Makhene: Oct 29, 2024 6:51:42 PM
Encryption is a powerful tool for securing patient information and meeting HIPAA’s requirements for protecting ePHI. While it may not be strictly...
3 min read
Tshedimoso Makhene: Oct 29, 2024 1:13:47 PM
The U.S. Department of Health and Human Services’ Office for Civil Rights has published a video to help healthcare organizations prevent ransomware...
2 min read
Tshedimoso Makhene: Oct 28, 2024 6:42:43 PM
UnitedHealth has confirmed that the February ransomware attack on Change Healthcare exposed the personal and healthcare data of over 100 million...
