Roughly 38,000 Common Security Framework (CSF) assessments have been performed in the last three years. The Health Information Trust Alliance (HITRUST) is expecting a continuous demand for CSF certification thanks to the third-party assurance requirements from major health organizations.
Category: Compliance Standards
Staying informed about all of the cyber security compliance standards is essential to keeping your company safe from hackers. Read on to learn about the various steps you can take to stay up to date with your industry’s compliance standards.
-
How to Prevent a Data Breach At a Cannabis Dispensary
Recent numbers indicate that the global legal marijuana market is expected to reach $146.4 billion by the end of 2025. A survey by Grand View Research further added that medical marijuana will likely dominate the market a few years from now with a projected value of $66.3 billion.
-
Soc 2 Auditing Guide
Data is growing faster than it ever has before. But it is starting to become the biggest risk of every organization. The convenience and collaboration of using data stores in the cloud means that companies and hackers have more information and more access to it by design.
-
Consumer Rights Under CCPA: What You Need to Know
Is your business ready for the California Consumer Privacy Act (CCPA)? If you handle consumers’ personal information, resolve to get in compliance before it’s too late. Starting January 1, 2020 consumers are going to be entitled to protection from companies selling personal information to other third-party companies without their knowledge. They are also going to be entitled to relief from wrongful sharing of their personal information, whether or not it was leaked on purpose. Read on to find out what these new protections are and what you can do about them to reduce your liability.
-
Should My Company Become A HITRUST Assessor?
Companies that broadly occupy the security space might consider a new service they could offer at the intersection of healthcare and cybersecurity: becoming a HITRUST assessor.
All kinds of personal data already lives online, but now we’re faced with medical categories of data being usefully stored there as well. And the cynics and realists alike know that anything stored online is fundamentally vulnerable to cyber attacks
-
How To Prepare For A HITRUST Audit ?
Healthcare organizations pursue HITRUST certification because they want to demonstrate productive forward motion on cybersecurity mindfulness. A mark of HITRUST compliance means that a business has taken steps to interrogate its technological infrastructure for flaws and potential improvements.
-
Challenges of Managing Personally Identifiable Information
It’s difficult in the current technological environment to determine what falls under private or personal information, especially considering how many social media platforms exist. People post a plethora of information about themselves causing the concept of privacy to become skewed. All of this information provides companies with a window into the consumers’ minds and consequently their wallets. But, with information collection comes the responsibility to protect personal data from malicious individuals.
-
Everything You Need to Know About Service Organization Control Reporting
System and Organization Controls (SOC) reports are an essential method for service organizations to build trust and confidence in software and service delivery processes and controls that protect information and systems against risks, including unauthorized access and damage to systems. The SOC report framework, previously referred to as Service Organization Controls, was developed by the American Institute of Certified Public Accounts (AICPA) to be managed by independent third party certified public accountants (CPAs).
-
NIST Guidance on Mobile Security
Over the last two decades, the role of IT departments has undergone dramatic change due to the growing percentage of Americans who rely upon their tablets, smartphones, or similar mobile devices to accomplish their daily work activities. As is so often the case, this progress has been a boon in some ways and a mounting problem in others, especially for IT; on one hand, the Internet of Things [IoT] has made it so employees are more efficient, on the other, it has opened up a new Pandora’s box of potential cybersecurity threats.
Security controls rarely keep pace with the security risks posed by new tech. And in the case of mobile, security threats arise from both bring your own device [BYOD] policies as well as corporately owned and personally enabled [COPE] mobile policies. In response to this looming threat, the National Institute of Security Technology [NIST] released its “Guidance on Mobile Security Report,” which we’ll outline below. Armed with these security recommendations, your business can ensure that your mobile security practices are up to date and robust.
-
Who is the HITRUST Alliance?
Cybercriminals are already clearly established bad guys online, and it’s up to your cybersecurity tools and standards to keep you safe.
Top-of-the-line firewall and antivirus software might go a long way toward protecting the data on your own network, but how do you protect the most sensitive data when it lives somewhere else entirely? You surely need someone else’s help to protect your data when it lives in places you might not even be aware of. The healthcare industry stashes patient data all over the place, for example.