Is Your Entity More Secure than HHS?

Experts: Gov Security Flaws Also Common in Private Sector … For instance, issues relating to CIO-CISO hierarchy also are widespread, says Tom Walsh, founder of his own security consulting firm. “We sometimes refer to this as, ‘the fox guarding the hen house,’” he says. “In some organizations, information security reports to other departments, such as […]

Read More

EHR Cyberattack Affected 3.9 Million

Investigation Reveals Far More Organizations Impacted … Security expert Tom Walsh, founder of the consulting firm tw-Security, says he is startled by how many victims and entities are affected by the breach. ” I was surprised at the number of entities affected and the total number of patients. Some of those entities affected are located […]

Read More

Preventing Insider Breaches at BAs

Experts Provide Tips for Reducing Vendor Risks … It’s impossible for covered entities to be 100 percent certain that BA employees aren’t inappropriately accessing protected health information, says Keith Fricke, principal consultant at tw-Security. “People are the weakest link in security; behavior contrary to company policy and poor choices in how privileged access is used […]

Read More

Shoring Up HealthCare.gov Security

With Obamacare’s Future Solidified, Privacy Fears in Spotlight … Health insurers, as well as health insurance exchanges and their related databases, are a potential target for hackers because “any collection of data that includes Social Security numbers is particularly vulnerable,” notes security expert Tom Walsh, founder of the consulting firm tw-Security. “Healthcare was doing a […]

Read More

Survey Shows Compliance Overconfidence

2015 Healthcare Information Security Today Survey Results … “Having a documented information security plan is important because it serves as ‘a roadmap,’” says Tom Walsh, founder of consulting firm tw-Security. “It’s laying the foundation, the groundwork as far as where the security program will be going in the immediate future, as well as further out.” […]

Read More

What The Departure Of ONC’s DeSalvo Would Means For Health IT

… Tom Walsh, security expert and CEO of consulting firm tw-Security, doesn’t believe DeSalvo’s move will be very disruptive, especially considering that her replacement will be part of the lame duck Obama administration. He personally expressed a desire that ONC will eventually pay more attention to data integrity issues, and not just interoperability.   For […]

Read More

What “HIPAA-compliant” really means

If your practice were to come under a random audit for monitoring compliance with the Health Insurance Portability and Accountability Act (HIPAA), would you pass? Learn what it really means to be in compliance with HIPAA and learn tips from experts. Dana DeMasters, a privacy and security officer at Liberty Hospital in Liberty, Missouri, and […]

Read More

Why Data Breach Prevention Will Steer HIMSS15

… Even before the Anthem and Premera data breaches, healthcare organizations were well aware that cybersecurity threats were on the rise. Several of the education sessions at HIMSS further demonstrate this fact, and will provide in-depth insight and tips for how facilities can keep sensitive information secure, while still ensuring that the latest technologies can […]

Read More