Health IT Security and Compliance


Rigor and Realism in Cybersecurity Strategy

By Angela Fitzpatrick – Cyberattacks on healthcare organizations and their business associates continue to increase at an alarming rate, with nearly 500 breaches affecting 500 or more individuals each reported to the U.S. Department of Health and Human Services Office for Civil Rights between January and November 2023.



Healthcare Cybersecurity in 2024

By David Finn – It is very difficult to talk about 2024 without starting from where we are ending 2023. We only need to go back to Thanksgiving to paint the picture of healthcare cybersecurity in 2023. Over Thanksgiving weekend, a single ransomware attack left 30 hospitals across 6 states without network services.



The Lock & Key of Healthcare: Encryption’s Role in Patient Privacy

By Art Gross – Back in the day, physical safeguards were all we had to protect patient files. In today’s world where most information is stored digitally, a filing cabinet and key can no longer do the trick. The utilization of data encryption stands as one of the most fundamental and effective methods to ensure the confidentiality and integrity of sensitive patient information.


Even a Pandemic Doesn’t Stop HIPAA

By Matt Fisher – Maintaining and protecting privacy for patients and healthcare information is important and necessary at all times. The requirement for keeping privacy applies no matter the circumstances, which can mean in the middle of a pandemic. The most recent HIPAA settlement announced by the Office for Civil Rights provides that reminder.


Shading the Gray for Tracking

By Matt Fisher – The use of tracking technology in healthcare continues to garner a lot of attention. The issue first came to the fore in 2022 following an expose that discovered a large majority of hospitals and health systems across the country included Meta Pixel on their websites in numerous different places.