Help Me With HIPAA
482 episodes - English - Latest episode: 14 days ago - ★★★★★ - 61 ratingsIn today's environment of data breaches, identity theft, fraud, and increasing connectivity, HIPAA Privacy and Security rules are a responsibility to your patients and your clients. HIPAA isn't about compliance, it's about patient care.
Homepage Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed
Episodes
Always BOLO - Ep 465
July 05, 2024 04:30 - 52 minutes - 72.4 MBEver wonder why staying vigilant in cybersecurity is like playing whack-a-mole? Let's dive into some wild stories that highlight the need to always be on the lookout! From hackers using legitimate websites to spread malware, to the humorous and slightly terrifying saga of employees using mouse jigglers to fake work, to cyberattacks from space, there are a lot of reasons why we should always keep our guard up in the wild world of cybersecurity! More info at HelpMeWithHIPAA.com/465
Crawl Out Through The Fallout - Ep 464
June 28, 2024 04:30 - 51 minutes - 71.4 MBWhat happens when healthcare giants falter in the face of cyber threats? Today, we dive into the critical need for better cybersecurity investments, continuous training and education and robust cybersecurity standards. We will explore the fallout from UHG’s cyber incident and break down three fiery letters from Congress demanding accountability and stricter regulations for cybersecurity practices in healthcare. More info at HelpMeWithHIPAA.com/464
Will Your Response Plan Work Without Internet? - Ep 463
June 21, 2024 04:30 - 48 minutes - 112 MBToday, we're diving into a topic that might keep you up at night and might make you reconsider your relationship with your Wi-Fi router. Picture this: your internet goes down, and it's not just a blip—it's a full-blown blackout. We're talking no Netflix, no Zoom meetings, and definitely no online shopping. We’ll unravel the chaos that ensues and discuss how you can keep your cool and your business running smoothly when the digital world decides to take a nap. More info at HelpMeWithHIPAA.c...
7 Crucial Steps to a Comprehensive SRA - Ep 462
June 14, 2024 04:30 - 1 hour - 85.7 MBJoin us as we debunked some common myths about what Security Risk Analysis isn't and then cruise through the seven essential steps to conduct a complete and thorough SRA for any organization. It’s not just a one-off IT review or a checkbox on compliance forms—it’s an ongoing, dynamic process. From identifying what you need to protect to managing how you protect it, each step builds on the last to fortify your defense against the digital wild west. More info at HelpMeWithHIPAA.com/462
Can Clickers Change? - Ep 461
June 07, 2024 04:30 - 48 minutes - 68.5 MBToday we dive into the world of compulsive clickers—the folks who just can't help but tap on every tantalizing link that winks at them from their inbox. It's not just a harmless habit; these clicks can lead to some pretty sketchy places. Imagine a world where every click could be a potential minefield, threatening your digital safety with every tap. But here's the kicker: can we change these click-happy habits? Let's explore whether it's possible to turn a reckless clicker into a prudent, pa...
Battling Cyber Threats and Burnout - Ep 460
May 31, 2024 04:30 - 59 minutes - 82.6 MBImagine juggling the intense world of cybersecurity where you're constantly putting out digital fires, with trying to keep your own mental batteries charged. It's like being a superhero who also needs to take some me-time. Our discussion dives into how we can manage the high-stakes of cybersecurity and stress-packed jobs while also making sure we don't crash and burn. We’ll talk about everything from rebooting your brain with a dose of humor to the serious implications of cyber threats on me...
Verizon DBIR 2024 Review - Ep 459
May 24, 2024 04:30 - 1 hour - 87.3 MBIt is time to review the annual Verizon Data Breach Investigaton report. First, we will hit the big notes from their summary. Then, we can add in a few tidbits from the bigger report details. We'll break down key statistics, discuss emerging threats, and offer insights into what these findings mean for the health sector and HIPAA privacy and security programs. More info at HelpMeWithHIPAA.com/459
Time for mandatory MFA? - Ep 458
May 17, 2024 04:30 - 48 minutes - 67.4 MBAfter the big cyberattack on Change Healthcare, there’s a hot debate about making Multi-Factor Authentication (MFA) a must-have for all public access points. With Congress getting involved and experts pushing for tougher security, it’s clear that better safeguards are needed to keep our healthcare data safe. This shift towards mandatory security measures shows just how serious cyber threats have become. More info at HelpMeWithHIPAA.com/458
Who pays for breach notifications? - Ep 457
May 10, 2024 04:30 - 56 minutes - 78.7 MBWho's on the hook for breach notifications in healthcare? Recent cybersecurity incidents like the massive Change Healthcare data breach have left providers scrambling and seeking clarity. The tangled relationships between Covered Entities and Business Associates make it tricky to figure out who's liable, especially when cyber incidents ripple down the vendor chain. This raises big questions about the contents of Business Associate Agreements and clarifications on who's responsible for what, ...
Change is Gonna Make Change Happen - Ep 456
May 03, 2024 04:30 - 1 hour - 86.7 MBThe U.S. healthcare sector is facing significant changes with new HIPAA rules boosting privacy protections, particularly for reproductive health. At the same time, the industry is tackling serious cybersecurity issues highlighted by a major ransomware attack on Change Healthcare. This dual focus on strengthening legal compliance and enhancing data security underscores the urgency of protecting patient information and maintaining trust in healthcare systems. More info at HelpMeWithHIPAA.com...
AI Plus Small Business Cybersecurity - Ep 455
April 26, 2024 04:30 - 57 minutes - 80.9 MBIn the world of cybersecurity, small businesses have their own set of unique challenges. As AI technology becomes more common, using AI in cybersecurity sounds promising, but it's crucial to handle it wisely to avoid new risks. These tools are powerful, but they need to be used carefully because they can also open up new kinds of cyber threats. Small businesses need to build a strong culture of security, making sure everyone is up to speed and constantly testing their defenses against attack...
Attackers Enjoy Sweet Fruit of Patience - Ep 454
April 19, 2024 04:30 - 50 minutes - 70.5 MBAristotle once said, “Patience is bitter, but its fruit is sweet.” That's totally spot on when you think about cybersecurity threats and how sneaky cybercriminals can be. These attackers plant their harmful seeds and just hang back, waiting for the right time to take advantage of old weaknesses. Their patience and careful planning mean they can strike effectively, sometimes after years of waiting, showing just how tricky it is to handle digital security. It really highlights why we need to b...
Learning From The MGM Hack - Ep 453
April 12, 2024 04:30 - 57 minutes - 79.7 MBOne Friday night in September last year, a massive hack at the MGM Grand caused quite a stir in Las Vegas. Cybercriminals used tricky tactics to slip through the cracks, infiltrating the network, and disrupting services at the hotel and casino. It's a wake-up call for everyone to step up their security game and stay one step ahead in this fast-changing world of cyber threats. More info at HelpMeWithHIPAA.com/453
Mitigate MSP Risks - Ep 452
April 05, 2024 04:30 - 57 minutes - 80.7 MBMSPs are like the backstage crew for your business's IT show, handling everything from network management to cybersecurity. But here's the kicker: while they're busy protecting you, they've got to make sure they're not accidentally opening the back door for trouble with their own tools and business practices in the process of delivering their services. Security is a shared responsibility. More info at HelpMeWithHIPAA.com/452
Vendors Surprised By Vetting - Ep 451
March 29, 2024 04:30 - 1 hour - 85.8 MBIn an increasingly interconnected and data-driven world, the importance of rigorous vendor vetting cannot be overstressed. Vendors ticking a box saying that they use a framework for data security and compliance isn’t enough anymore. It is a critical due diligence process that helps clients build secure, compliant, and mutually beneficial business relationships, minimizing risks and enhancing overall business performance. And with the recent Change Healthcare attack, vendors can expect to rec...
Change HC Attack, What The... - Ep 450
March 22, 2024 04:30 - 48 minutes - 67.3 MBAs Change Healthcare ransomware attack unfolds, concerns are escalating regarding patient care and safety, pushing the Healthcare Sector Coordinating Council's (HSCC) 5 Year Strategic Plan into the spotlight. Donna and David talk with Gary Salman, CEO of Black Talon Security, on the ongoing situation, what is known and unknown, and its potential long-term effects. With the attack exacerbating issues within the healthcare system and highlighting the urgent need for robust cybersecurity measur...
HIPAA Summit Review 2024 - Ep 449
March 15, 2024 04:30 - 1 hour - 87.8 MBFor more than a decade, Donna has immersed herself in the plethora of sessions from the National HIPAA Summit, extracting a wealth of insights into the present and future landscape of HIPAA. Today, she will impart her top three takeaways from this year’s Summit, essential knowledge for navigating the road ahead. Buckle up folks, because these insights are far from trivial. More info at HelpMeWithHIPAA.com/449
Critical to Stable Condition in 5 Years - Ep 448
March 08, 2024 05:30 - 1 hour - 85.6 MBHealthcare is inherently about trust; trust between patients and providers, trust in the efficacy of treatments, and increasingly, trust in the technology that underpins modern medicine. However, this trust is under siege by an evolving landscape of cyber threats. Today, we tackle the critical status of healthcare cybersecurity and the concerted effort the Health Sector Coordinating Council Cybersecurity Working Group has developed to transition the industry to a stable posture over the next...
NIST, Moobot, Ransomware AI Impact - Ep 447
March 01, 2024 05:30 - 1 hour - 88.3 MBThe rapid advancement of AI could soon eclipse our understanding, with its capability to predict and even manipulate human behavior. Today, we will dive into how AI is reshaping our understanding and preparedness for the digital threats lurking around the corner. Plus, NIST just released guidance that can be used to help improve the healthcare sector’s cybersecurity posture and assist with achieving compliance with the HIPAA Security Rule. More info at HelpMeWithHIPAA.com/447
Insider Breach Gets Huge OCR Settlement - Ep 446
February 23, 2024 05:30 - 44 minutes - 60.4 MBOCR recently announced a jaw-dropping settlement that should have every healthcare professional on high alert. An insider breach that had staggering repercussions, leading to a monumental $4,750,000 settlement and a two year CAP. HHS has also released new cybersecurity resources and guidance and more is to come. There is no excuse anymore folks. Cybersecurity is everyone’s responsibility and OCR’s enforcement of privacy and security failures is picking up. More info at HelpMeWithHIPAA.com/...
Cyber Insurance Trends with John Miller - Ep 445
February 16, 2024 05:30 - 56 minutes - 78.6 MBImagine your cybersecurity measures as the immune system of your body. Just like our bodies are constantly exposed to germs and viruses, your business is exposed to a barrage of cyber threats. Cyber insurance is like health insurance for your company's digital health. We are joined today by John Miller of Sterling Seacrest Pritchard, exploring the crucial intersections of healthcare, cyber coverage, and the corporate responsibility of protecting sensitive data. More info at HelpMeWithHIPAA...
New HPH Sector Cyber Performance Goals Released - Ep 444
February 09, 2024 05:30 - 1 hour - 88.7 MBHHS has adapted CISA’s Cybersecurity Performance Goals, released in March 2023, for healthcare entities to better protect those in the healthcare sector from cyberattacks. These voluntary goals aim to strengthen cyber preparedness, improve cyber resiliency, and protect patient health information and safety. In this episode, we will review the HPH CPGs as they will be the basis of the proposed HIPAA Security Rule changes slated to be released later this year. More info at HelpMeWithHIPAA.co...
Small Business Cybersecurity 2024 - Ep 443
February 02, 2024 05:30 - 50 minutes - 70.3 MBIt’s no secret that small businesses face challenges in understanding and keeping up with the rapidly changing cyber threat landscape. Today we’ll discuss some of those challenges and review new free resources from NIST and CISA coming out in 2024 that can help SMBs manage and improve their cybersecurity programs. Buckle up, it’s going to be a busy year. More info at HelpMeWithHIPAA.com/443
New NY State AG HIPAA Enforcement - Ep 442
January 26, 2024 05:30 - 57 minutes - 80.1 MBWe all know that OCR is the HHS department that oversees and enforces HIPAA to ensure the protection of individuals' healthcare information. However, more and more states around the country are also making efforts to protect their constituents’ personal information and hold companies accountable for their poor data security practices. Today, we discuss recent HIPAA enforcement actions taken on businesses by the NY State Attorney General’s Office. More info at HelpMeWithHIPAA.com/442
Ban Ransomware Payments? - Ep 441
January 19, 2024 05:30 - 48 minutes - 67.9 MBThe number of ransomware attacks impacting critical services, compromising personal information and attackers requesting higher and higher ransoms continue to rise. Today, we discuss this pressing issue, implications of ransomware attacks, the ethical considerations of paying ransoms, and the urgent need for preventative measures. More info at HelpMeWithHIPAA.com/441
Privacy Week Coming Soon - Ep 440
January 12, 2024 05:30 - 48 minutes - 67.9 MBIn today’s world, it's essential to recognize the importance of safeguarding your personal information. From the moment you wake up and check your smartphone to the minute you stream your favorite show or make an online purchase, your every digital move leaves a trail of data breadcrumbs. But, you have the power to take charge of your data privacy. You can start by taking part in Data Privacy Week, sponsored by the National Cybersecurity Alliance. More info at HelpMeWithHIPAA.com/440
Recap 2023 Predictions 2024 - Ep 439
January 05, 2024 05:30 - 47 minutes - 66 MBIt’s time to recap Donna and David’s 2023 HIPAA and cybersecurity predictions and hear what their crystal ball says about what to look out for in 2024. And, since AI exploded in 2023, we asked ChatGPT for predictions for 2024 too. More info at HelpMeWithHIPAA.com/439
New HHS Cyber Plan Announced - Ep 438
December 29, 2023 05:30 - 57 minutes - 79.8 MBIt’s no secret that healthcare is vulnerable to cybersecurity threats and patient privacy and safety are at risk. Good news! HHS recently announced a plan to enhance cybersecurity in the healthcare and public health sectors. Through various initiatives, including 405(d) and other HHS efforts, plans are starting to come together like pieces of a puzzle to help practices stay ahead in the ever-evolving landscape of cybersecurity. It's time to get informed and take action to protect your practi...
2023 Holiday Blooper Show
December 22, 2023 05:30 - 11 minutes - 28 MBIt's time of year again where we take some time off and let Bojan create a Help Me with HIPAA bloopers show of our mishaps and outtakes. Stick around to the end - we have a little surprise for you. Thanks to Bojan for his skill in making us sound so good every week. Thanks to all our listeners who have been with us and share our podcast with others. We are here because of you. As always, remember, HIPAA is not about compliance, it is about patient care.
Decoding CISA's HPH Mitigation Guide - Ep 437
December 15, 2023 05:30 - 56 minutes - 78.8 MBCISA has released a mitigation guide to combat the critical and complex cyber threats affecting the Healthcare and Public Health Sector. It provides best practices, essential strategies and insights for safeguarding our healthcare infrastructure against ever-evolving cyber threats. Join us as we navigate through this important document, breaking down its complexities and highlighting its significance in the ongoing battle against cyber threats in the healthcare sector. More info at HelpMeW...
Multi-state Cyber Attack Diverts ER Ambulances - Ep 436
December 08, 2023 05:30 - 50 minutes - 70.1 MBYou know how we say that hackers love to launch attacks during the holidays because that’s when most folks are distracted and in a hurry to begin their time off? Well guess what? There are already a few cyber attacks in the news just from this past Thanksgiving. Case in point, the recent ransomware attack that diverts ER ambulance services across multiple states. More info at HelpMeWithHIPAA.com/436
Breach Equals Class Action Lawsuits - Ep 435
December 01, 2023 05:30 - 52 minutes - 73.9 MBA data breach can have significant and far-reaching consequences for both patients and businesses in the healthcare industry. Today, we delve into the impacts of a recent breach and discuss the evolving challenges of managing healthcare vendors with access to sensitive patient information. Plus, we weigh in on patient privacy concerns when it comes to the media. More info at HelpMeWithHIPAA.com/435
FBI Private Industry Notification - Ep 434
November 24, 2023 05:30 - 57 minutes - 80.2 MBIt is crucial to apply mitigation strategies to reduce the likelihood and impact of ransomware incidents due to the severe and far-reaching consequences these cyber threats can have on individuals, organizations, and society as a whole. The FBI recently published a notification highlighting emerging ransomware trends involving attacking the same victims multiple times. Listen in to hear what you can do to help reduce the likelihood of becoming a victim. More info at HelpMeWithHIPAA.com/434
CISO Security Maturity Report 2023 - Ep 433
November 17, 2023 05:30 - 53 minutes - 74.2 MBEvaluating the security posture of organizations through the lens of culture, technology, risk, and people is crucial in today's complex digital landscape. Culture sets the tone for an organization's security mindset, influencing employee behavior and awareness. Today, we review ClubCISO’s Information Security Maturity Report 2023 that evaluates the security posture according to CISOs across the globe. More info at HelpMeWithHIPAA.com/433
First OCR Ransomware Settlement - Ep 432
November 10, 2023 05:30 - 49 minutes - 69.9 MBOCR just announced its first ransomware settlement, emphasizing the importance of proactive cybersecurity measures and the implications for business associates. Ransomware threats are increasingly common, evolving rapidly and continue to target the healthcare industry which highlights the importance of healthcare organizations and their business associates to prioritize cybersecurity. More info at HelpMeWithHIPAA.com/432
Top 10 Cybersecurity Misconfigurations - Ep 431
November 03, 2023 04:30 - 46 minutes - 64.9 MBIn our rapidly evolving digital environment, cybersecurity misconfigurations pose significant threats to organizations of all sizes. Misconfigurations can expose systemic weaknesses and make organizations vulnerable to cyber attacks. In this episode, we will review a report from the NSA and CISA highlighting some of the most common misconfigurations that need to be addressed. More info at HelpMeWithHIPAA.com/431
Are Nightmares Contagious? - Ep 430
October 27, 2023 04:30 - 45 minutes - 63.3 MBWhen vendors have incidents that disrupt their operations, it’s like having ghosts haunt a business's continuity plan, just waiting to make an eerie appearance. That's why it is crucial for businesses to include vendor-related security incidents or downtime in their business continuity plans. One company’s nightmare can be contagious to its customers. More info at HelpMeWithHIPAA.com/430
Alerts Coming From Everywhere - Ep 429
October 20, 2023 04:30 - 48 minutes - 68.3 MBIn today's interconnected digital world, keeping up with cybersecurity alerts is like having a trusty, cyber-savvy sidekick by your side. As our reliance on technology continues to grow, staying ahead of the game is essential. Cybersecurity alerts are like the Bat-Signal of the digital realm, lighting up to warn you of impending threats. Proactive vigilance in the face of these alerts is not merely a best practice; it's an imperative in safeguarding sensitive data, privacy, and the integrity...
HIPAA Online Tracking News - Ep 428
October 13, 2023 04:30 - 46 minutes - 65.7 MBWeb tracking tools that collect or share personally identifiable health information can pose significant implications when it comes to HIPAA privacy and security. Unauthorized tracking can compromise patient confidentiality and privacy, potentially exposing sensitive health data. Today, we are doing a follow up from our previous podcast on web tracking tools and discuss a few recent articles and guidance released by HHS, FTC and OCR. More info at HelpMeWithHIPAA.com/428
What is a CHMSP? - Ep 427
October 06, 2023 04:30 - 47 minutes - 67.2 MBFor MSPs, grasping HIPAA compliance isn't just a good idea; it's a necessity. Neglecting it can lead to legal issues and lost opportunities in the healthcare IT sector. Picture unintentionally mishandling patient data and facing legal consequences – that's a risk you can't ignore. A solid understanding of HIPAA can boost your reputation and credibility within the healthcare industry. To acquire this essential knowledge, consider enrolling in the Certified in HIPAA for MSP (CHMSP) course offe...
4 Actions 4 Cyber Safety - Ep 426
September 29, 2023 04:30 - 40 minutes - 56.5 MBCybersecurity Awareness Month is just around the corner. It's that time of year when we all take a moment to up our game in the digital world. Whether it's creating stronger passwords, being mindful of phishing emails, or updating our software regularly, it's a reminder that our online safety matters. So, listen to this week’s podcast to find ways to keep cybersecurity top of mind and make sure our digital lives are as secure as possible! More info at HelpMeWithHIPAA.com/426
OCR Sends Enforcement Message - Ep 425
September 22, 2023 04:30 - 44 minutes - 62.8 MBAssuming large organizations with lots of healthcare clients have a proper HIPAA privacy and security program in place could be disastrous. OCR recently settled investigations with LA Care, a large health plan in California, for $1.3 million and a 3 year corrective action plan. Join us as we discuss this settlement and learn from others' mistakes. More info at HelpMeWithHIPAA.com/425
Securing Older Technologies Still In Use - Ep 424
September 15, 2023 04:30 - 46 minutes - 65 MBSecuring older, legacy technologies from cyber threats is extremely important in today's interconnected digital world. Older devices often lack the robust security features of modern counterparts, making them vulnerable targets for hackers seeking to exploit weaknesses. Today, we review HSCC’s Health Industry Cybersecurity – Managing Legacy Technology Security (HIC-MaLTS) guide that provides recommendations to address the legacy technology challenges facing healthcare. More info at HelpMeW...
Check Your Cyber Pulse - Ep 423
September 08, 2023 04:30 - 43 minutes - 61.4 MBIn the digital age, cybersecurity has become a critical concern for businesses and individuals alike. Today, we review the latest release from 405(d), Check Your Cyber Pulse. This cybersecurity cosmo quiz helps small organizations evaluate their cyber pulse regarding the 10 cybersecurity practices of HICP and decide where they should focus efforts to improve their cybersecurity behaviors. More info at HelpMeWithHIPAA.com/423
How One MSP Handled a Ransomware Attack - Ep 422
September 01, 2023 04:30 - 1 hour - 96 MBRansomware attacks have become a prevailing threat to businesses of all sizes, causing significant financial losses, reputational damage, and operational disruptions. In this episode, we talk with Robert Cioffi, COO and Co-Founder of Progressive Computing, who shares how they navigated through the Kaseya ransomware attack. He shares invaluable insights into their journey of resilience, recovery, and the crucial lessons learned along the way. More info at HelpMeWithHIPAA.com/422
Successful Data Breach Communication - Ep 421
August 25, 2023 04:30 - 46 minutes - 65 MBIn a crisis situation, organizations must be prepared to communicate effectively in these challenging situations. Karen Phillips, of Phillips & Marek, joins us to discuss strategies and best practices for managing data breaches and how to communicate with stakeholders, including internal staff, patients and the media. More info at HelpMeWithHIPAA.com/421
The Value in Evaluation - Ep 420
August 18, 2023 04:30 - 52 minutes - 74 MBAre you worried about the safety of your data and the potential security risks to your organization? In this episode, we talk with Jen Stone of SecurityMetrics to explore the importance of performing technical and nontechnical evaluations of your security program. Jen helps to explain the benefits of thorough evaluations and how they can safeguard your organization against potential vulnerabilities. More info at HelpMeWithHIPAA.com/420
2023 Cost of a Data Breach Study - Ep 419
August 11, 2023 04:30 - 54 minutes - 75.9 MBAs in years past, we dive into IBM’s 2023 Cost of a Data Breach Report. This annual study sheds light on the ever-evolving landscape of data breaches and provides valuable insights for organizations looking for ways to focus their efforts and money to help prevent and reduce the costs associated with a data breach. More info at HelpMeWithHIPAA.com/419
Does HIPAA require MFA? - Ep 418
August 04, 2023 04:30 - 42 minutes - 59.6 MBWe all know how important it is to keep our personal information and important data secure. MFA can add an extra layer of protection to our digital lives. But does HIPAA require MFA? The short answer: no, but yes. Listen in to hear how best to lock your cyber door against cyber attacks. More info at HelpMeWithHIPAA.com/418
Our takeaways from the 2023 VDBIR- Ep 417
July 28, 2023 04:30 - 50 minutes - 70.8 MBVerizon has released their 2023 Data Breach Investigations Report (DBIR). This year they focused more on an analysis of actual data breaches - the types of incidents causing the breaches, the motivations of bad actors, how they tend to carry out their attacks and what data they are grabbing. We always look forward to reading this report because it not only has a lot of great information, but also because it contains a good bit of humor. You know we like that. More info at HelpMeWithHIPAA.c...