Insights & Resources

Change Healthcare was impacted by a cybersecurity incident that breached its information technology network.

Administrative, physical, and technical safeguards are an essential element of HIPAA security and essential for protecting PHI and ePHI.

HIPAA’s requirements apply to more than doctors and hospitals. Protect your business and clients by learning about key requirements including who needs to comply.

Non-medical businesses may be surprised that they are subject to HIPAA because they have clients handling ePHI.

Industries that apply both HIPAA and PCI compliance regulations can save time and effort by addressing these areas concurrently.

The NIST released guidance that includes rarely provided how-to instructions that will be helpful to organizations in monitoring telehealth risks.

You may have a fitness tracker that is connected to an application on your phone. The app sends data to a server that your primary care physician (PCP) can also access.

We’ve all seen it. Your organization has a contract in place with a key customer, but your obligations don’t necessarily make sense to the people responsible for achieving them. This is especially common with IT-related obligations, and is typically caused by the volume of verbiage addressing IT topics and a lack of understanding of that jargon by legal and finance leadership.