Celebrating 20 Years Helping Our Customers Achieve Success!

Sound advice. Simple approach.


How can we help you improve your cyber posture?

Why tw-Security?

  • Leadership: tw-Security is a nationally recognized leader in healthcare cybersecurity, data privacy, and compliance.
  • Our customers come first: We succeed when you succeed. We value your time. 
  • Stability: tw-Security is a privately held, partner-owned company that has been in business since 2003.
  • Vendor-neutral: We are not a reseller of products or services.
  • Results-driven: We follow an ‘outcomes’ driven methodology to define, measure, and report project progress that drives on-time, on-budget results.
Contact tw-Security to help you identify and mitigate risk!

tw-Security scored 97.3 in the 2023 Best in KLAS Report in the Security and Privacy Consulting category, and rose to second place.

Scores are based on 18 months of validated data across multiple pillars: loyalty, operations, relationship, services, and value.

Additionally, tw-Security achieved a year-over-year improvement of 8%, which is the highest improvement score of all qualified firms.

We’re proud of our score, 24 unique organizations participated in the research.

The first-ranked organization achieved a score of 99.5, based on 7 responses.

THANK YOU to all our teams, customers, and supporters. 
We look forward to exciting developments and continued growth and improvement in 2023!


tw-Security’s scalable solutions result in a prioritized “road map” to document that identified risk and compliance deficiencies are being addressed and corrected, as part of the risk management process. Now is the time to conduct an enterprise risk analysis and advance your program’s maturity – contact tw-Security.


tw-Security has experience with multiple regulatory requirements, standards, and frameworks. This includes HIPAA, PCI DSS, NIST Cybersecurity Framework, ISO 27002, SOC2 Type 2, and CSA Section 405(d) HICP (Health Industry Cybersecurity Practices.) We help you create your “Book of Evidence” – contact tw-Security.

Data Privacy

Information is an organization’s most nonhuman valuable asset. The data privacy program includes protected health information (PHI), proprietary and confidential organizational data, and Personal Identifiable Information (PII). To update your policies, training, and enhance your data privacy program – contact tw-Security

Breaches: By the Numbers

Read it onscreen right here.

Q2 2023 - Sharp uptick in records exposed
Key takeaways:
There was a huge upsurge in the number of records compromised--almost double last quarter's (already high) figure.
Hacking, phishing, and email exploits dominated the threat landscape, with Business Associates proving to be a persistently vulnerable target.

Download your own PDF to read and share.

Contact tw-Security to protect your organization.





Unauthorized Access


Data Thefts


Patients Affected



    Areas of Expertise

    Our mission is to provide you with consulting services with a focus on integrity, quality, and consistency. Our services are grounded in the guiding principles that information security is the cornerstone to maintaining the public trust; that it is primarily a business issue, not just a technology issue; and that it should be risk-based, cost-effective, and aligned with your priorities, industry-appropriate practices, and relevant regulatory requirements. Multiple services are offered within the following "Areas of Expertise."

    tw-Security Cybersecurity and Data Privacy Programs Framework Defines Our Services.

    Let's start a conversation using our integrated program framework diagram.


    Our cybersecurity and data privacy program framework integrates the evaluation and security management processes, with elements of prevention, detection, and response services.

    These elements combine best practices with situational awareness to address the people, process, and tool dynamics of cybersecurity and data privacy programs.

    To reduce the likelihood of security incidents and data breaches, programs are designed for specific cyber-threats and environments.

    Meet our leadership team

    We have the hands-on experience you need to meet tomorrow’s data security challenges today.

    Tom Walsh <br> CISSP
    Tom Walsh
    Founder and
    Managing Partner
    Read Bio
    Kerry McConnell <br>  CISSP
    Kerry McConnell
    Principal Consultant
    Read Bio
    Keith Fricke, MBA <br>  CISSP, PMP
    Keith Fricke, MBA
    Principal Consultant
    Read Bio
    Mark Dill, CISM, CRISC <br>  Cybersecurity Auditor
    Mark Dill, CISM, CRISC
    Cybersecurity Auditor
    Principal Consultant
    Read Bio
    Fran Hunter <br> Partner
    Fran Hunter
    Partner, Business Development
    and CustomerCare
    Read Bio

    Who we serve

    We focus on the healthcare industry – both large and small.

    Our roster of over 250 customers represents a diverse cross-section of healthcare and related industries.

    Our healthcare hospital customers range from academic medical centers to critical access hospitals.

    We also serve specialty hospitals, freestanding ambulatory sites, and practice management organizations.

    Our customers include start-up business associates to mature software/service vendors.

    We assist universities with HIPAA-compliant programs and student health centers.

    We are called on to provide expert witness services.

    Professional organizations reach out to us for expertise, knowledge transfer, and advisory services.

    Put your trust in us

    Both professional organizations and industry professionals trust our insight.

    For over 20 years, our trusted advisors have shared their perspectives, insights, and observations on “top of mind” healthcare topics and trends with journalists and media professionals for a number of industry publications.

    To read what we've shared, visit TRUSTED ADVISOR - In The News section.

    Our experts have authored many influential articles and features, actively participate in professional organizations, and have shared their expertise in numerous seminars and presentations.

    Thought Leadership

    Tw-Security publishes technical and editorial content that addresses the entire spectrum of data cybersecurity.

    PDF: Title TBD
    PDF: Title TBD
    PDF: Title TBD
    PDF: Title TBD
    PDF: Title TBD
    PDF: Title TBD

    Trending Topics

    We’re often called on to collaborate and share expertise with industry, academia, and the media.
    Here’s what we’re reading—and writing—today:

    tw-Security is pleased to announce that Kathy O'Neil has joined our team as Senior Security Consultant. Senior Security Consultant Kathy...

    Read More

    tw-Security is pleased to announce that Mikki Massey has joined our team as Senior Privacy/Security Consultant. Senior Privacy/Security Consultant Mikki...

    Read More

    tw-Security is pleased to announce that Jill Burrington-Brown has joined our team as Senior Privacy/Security Consultant. Jill Burrington-Brown, MS, RHIA,...

    Read More

    Here’s what people are saying:

    COO, Cloud Software Vendor
    Risk profile work product - "Great document by the way, very easy to digest."
    CIO, Academic Medical Center
    tw-Security has been our ‘go-to source’ for interim CISO services, risk assessments, investigative projects, strategic planning, Meaningful Use confirmation, and reporting to OCR.
    Clinical Informatics Specialist & Privacy Officer, Specialized Treatment Centers
    I’m so happy you guys are working with me and getting us set up with policies and procedures that comply with the HIPAA Security Rule. I sleep so much better.
    HIPAA Privacy-Security Officer, Community Hospital
    Thanks for all you do in spreading the HIPAA gospel, and helping us all learn in a way that is so understandable and memorable.
    Chief Strategy Officer, Predictive Modeling Vendor
    Thanks for the super fast turn around. I expect nothing less from "the undisputed heavy weight champions of the wooooooorrrrrrrrllllllldddd!!
    Information Security Officer, Integrated Delivery Network
    We were especially pleased with the detailed review of our policies – no other consulting firm had ever provided that level of useful feedback.
    CEO and Founder, Patient Care Business Associate
    We are extremely satisfied with tw-Security helping get our HIPAA programs off to a solid start and the ongoing guidance to help us keep on track.
    CEO, Specialty Hospital
    This Risk Management Report looks very good and is easy to read and understand.

    Looking for more inspiration?

    Stay up to date!

    We only use your e-mail address to send you the best tips about tw-Security. You can always unsubscribe using the link in the e-mail.