Security Risk Assessment

How to Conduct a Cybersecurity Risk Assessment for Your Hospital’s ‘Forgotten’ IoMT Devices

By Ellie Gabel – Forgotten Internet of Medical Things (IoMT) devices often sit quietly on hospital networks, but they can become some of the most dangerous blind spots for health care organizations. Left unpatched or unmanaged, these devices provide easy entry points for ransomware attacks, patient data theft and service interruptions that disrupt clinical operations.

Read More




End of Year SRA

By Art Gross – A security risk assessment must be conducted to maintain HIPAA compliance per the Security Rule. A security risk assessment is also referred to as an SRA. It is a requirement for government plans such as Medicare, Obamacare, and Medicaid.


Security Risk Assessment

By Art Gross – The HIPAA Security Rule mandates that covered entities must conduct a security risk assessment or SRA. This includes health care plans for individuals, government plans (Medicare, Medicaid, Obamacare), and employer-sponsored plans.