Governance

alt text

Governance

Governance in cybersecurity refers to the overall management and direction of an organization's information security program.

Risk Management

alt text

Risk Management

Risk management is the process of identifying, assessing, and prioritizing potential risks to an organization and implementing measures to mitigate or minimize those risks.

Compliance

alt text

Compliance

Compliance in cybersecurity refers to the process of adhering to industry standards, regulations, laws, and policies related to information security and data privacy.

Tag: HIPAA

HIPAA as a Security Framework

HIPAA, the Health Insurance Portability and Accountability Act, is a federal law in the United States that sets standards for safeguarding certain health information. While HIPAA includes provisions related to information security, it is not considered a comprehensive cybersecurity framework. Enacted by Congress in 1996, and has continued to...

Current Healthcare Environment

As I look back over a long, successful career in the healthcare space, I have been fortunate enough to experience rapid change from the days of a pacemaker so large we were implanting them in the abdomen and tunneling the lead to the outside wall of the heart.  ...