Help Me With HIPAA

Cyber threats are a growing risk that is becoming increasingly difficult to avoid. Small and medium businesses are not immune to these cyber threats. They are a growing business risk. The first step in preventing cyber threats is awareness.  More info at HelpMeWithHIPAA.com/347

Security events can have a significant impact on your business. It's important to understand the magnitude of what's going on and what the risks are. Having a plan in place to deal with privacy and security events can make it better, but not having one can make it worse.  More info at HelpMeWithHIPAA.com/346

The harsh realities of cybersecurity are not always easy to hear, but they are the one thing that we cannot compromise on as they can have a huge impact on our lives. We must remain cyber aware and be vigilant in order to combat cyber threats. More info at HelpMeWithHIPAA.com/345

Kardon, Help Me With HIPAA and HIPAA for MSPs is hosting the first PriSec Boot Camp in Louisville, KY on Sep 12, 13, 14 and 15. This ain't yo Momma's privacy and security. It is a one of a kind event designed for those who need to understand and manage a privacy and security program.  Listen to today's podcast to learn all about it. More info at HelpMeWithHIPAA.com/344

Encryption can give you a false sense of security. Just because your device or your data is encrypted doesn't mean it is secure.  You have to understand how encryption works in order to understand how it doesn't work. More info at HelpMeWithHIPAA.com/343

Securing your website is often overlooked in planning discussions and business risk management decisions. Building a website is pretty easy these days, but keep in mind users expect to have a safe online experience too. Just like with social media sites, a lot can go wrong with a forgotten website. More info at HelpMeWithHIPAA.com/342

More and more SMBs are turning to MSPs to help secure their networks, protect their assets from cyber attacks and meet compliance obligations.  MSPs are looking to add new services to meet the SMB market demand.  Today, we review a few of our observations for SMBs and MSPs from a recent report on the focus for small businesses in the next few years. More info at HelpMeWithHIPAA.com/341

Honeypots are an important tool in the cybersecurity arsenal. They can be used to observe how attackers work and what their activities, intentions and strategies are. This information can help organizations better understand and defend against cyber attacks. More info at HelpMeWithHIPAA.com/340

Social media has become a very important part of our lives. It is the easiest way to connect with friends, family and even promote your business. If not secured properly, it can also be an easy way for someone to hack into your account and become "you" or be the spokesperson for your business.  More info at HelpMeWithHIPAA.com/339

A proper incident response plan is one that details your response to a data breach, cyber attack or other event.  Without a proper plan, things can go horribly awry.  In this episode, we discuss the steps to properly respond to a security incident and then give you seven ways you can completely screw it up. More info at HelpMeWithHIPAA.com/338

The unknown is the most dangerous. It's a saying that should be taken into account when protecting your most valuable asset - your data.  Today we talk about why creating an asset inventory of your hardware, software and data is an important first step to being able to protect it. More info at HelpMeWithHIPAA.com/337

A new year is right around the corner. The good news is 2021 wasn't as unpredictable as 2020, but 2022 could be tricky to navigate. It's time for the review of our 2021 predictions and for us to set new ones for 2022.  So, let's get started. More info at HelpMeWithHIPAA.com/336

Well, another year is coming to a close. No one will forget living through 2020.  Then, 2021 said "Hold my beer." As with every year, there were ups and downs. Who knows what we will be in for in 2022. Regardless, we will continue to adjust. Thanks to Bojan and our teams who help make this podcast a success. And special thanks to all our podcast listeners. We appreciate everyone's continued suppor...

OCR has released resolutions to five cases in its HIPAA Patient Right of Access Initiative. This brings the total cases to 25 since the initiative began. These cases continue to underscore the importance of this initiative. More info at HelpMeWithHIPAA.com/335

SaaS continues to grow as a popular way to deploy business applications. It is crucial for businesses to understand what data they are storing in their SaaS cloud applications and how to protect it from data breaches. So, listen to us discuss securing your SaaS. More info at HelpMeWithHIPAA.com/334

Protecting your company's data is no longer optional. With so many changes in how people work today and where they are working from, keeping a low profile when it comes to protecting data won't cut it anymore. Today, we review a recent report released by Shred-it, a secure information destruction company, called Data Protection Report 2021. More info at HelpMeWithHIPAA.com/333

For the Thanksgiving episode this year, we talk to the Kardon Team about the recent social engineering attack; a follow up from our Halloween episode, We Are Under Attack - Ep 328 . We find out what they experienced and how they felt during and after the attack.  And, because it's Thanksgiving, we each share what we are thankful for in 2021.  More info at HelpMeWithHIPAA.com/332

Use of legacy software and devices plague healthcare. OCR's recent newsletter focuses on why legacy systems are still used in healthcare organizations and provides guidance on ways to manage the risks of these systems. More info at HelpMeWithHIPAA.com/331

The HITECH Act added that state attorney generals can take on cases on behalf of their constituents under HIPAA.  We haven't seen that many cases from the states thus far, but that may be changing.  Today we discuss a recent New Jersey case regarding fraud, deceit, misrepresentation and professional misconduct. This is an eye opening state level case that everyone should pay attention to. More inf...

Insider threats are dangerous for any organization, not just healthcare. As a result, healthcare organizations need to be extra vigilant when it comes to protecting patient data. Today, we talk with Ray Ribble, CEO of SPHER , to hear some stories about why it's important to review EHR logs and how his company can help you identify potential insider threats. More info at HelpMeWithHIPAA.com/329

It's time for our annual Halloween episode!  This year we will tell you a scary, true story of how our two companies were actively targeted and attacked by a cybercriminal. Hear what happened and how our teams reacted to the cyber attack. More info at HelpMeWithHIPAA.com/328

In today's episode, we talk with Josh Corman, Chief Strategist Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security. We will learn about CISA and what information and freely available services they provide to help healthcare businesses and other organizations within the nation's 16 critical infrastructure sectors from cyber attacks.  More info at HelpMeWit...

Email is a great tool for communication. It is quick, simple, and it has the potential to reach so many people in so little time. But, it can also be an easy way for hackers to get their hands on your personal information if you're not being careful. Phishing scams are one of the most popular ways that hackers use email as a tool to steal your information and cause data breaches.  Email is evil! M...

IT and cybersecurity services are not the same. If you are in the market to purchase managed services or security services from an IT firm, you'll want to listen to this podcast to understand how they are different, why they are different and why you need to understand those differences to better protect your organization from cyber attacks. More info at HelpMeWithHIPAA.com/325

In a world where people are more dependent on technology but lack the expertise to manage their own networks and systems effectively and efficiently, they turn to Managed Service Providers (MSPs).  CISA has released a guide, Risk Considerations For Managed Service Provider Customers, that outlines risk considerations organizations need to consider when they partner with a MSP.  We will cover this...