Cyber Security and Information Systems Information Analysis Center
A key lesson to be learned from this case "is that the Office for Civil Rights can only be pushed so far when a covered entity or business associate is shown to have systemic, management-driven failures in putting into place safeguards to protect its health information," says privacy attorney David Holtzman, vice president at the security consulting firm
http://www.databreachtoday.com/32-million-hipaa-fine-analysis-a-9665
An investigation into the Anthem cyberattack found the identity of the attacker with a high degree of confidence” and “concluded with a medium degree of confidence that the attacker was acting on behalf of a foreign government.”
http://healthitsecurity.com/news/anthem-data-breach-reportedly-caused-by-foreign-nation-attack
Protecting medical devices from ever-shifting cybersecurity threats requires an all-out, lifecycle approach that begins with early product development and extends throughout the product’s lifespan.
While more organizations are likely looking for the best options to combat evolving cybersecurity threats, a recent study found that the majority of security professionals are overwhelmed by the amount of cyber threat data that they receive.
http://healthitsecurity.com/news/study-finds-cyberthreat-data-overwhelming-to-security-workers
In the twelfth HIPAA enforcement action so far this year, federal regulators have smacked St. Joseph Health System with a $2.14 million penalty after investigating a breach that left protected health information of nearly 32,000 individuals exposed to internet searches for more than a year.
Watchdog Report Calls for Expanded Security Guidance, But Some Experts Want New Rule.
But many say lack of financial resources and personnel is hindering better security practices.
Noted data security expert Mac McMillan says healthcare organizations should maintain their enterprises at a high state of readiness.
The research deal between the department and the venerable standards organization will encompass Internet-connected devices, but also the networks on which they're deployed — an "end to end" view.
http://fedscoop.com/va-partnering-with-underwriters-lab-on-medical-device-cybersecurity
The public platform, DTSec, contains a set of security performance requirements to prevent cyberattacks and data breaches.
The CSIAC is a DoD-sponsored Center of Excellence in the fields of Cybersecurity, Information Assurance, Software Engineering, Modeling & Simulation, and Knowledge Management & Information Sharing.Learn More
| Phone: | 800-214-7921 |
| Email: | i...@csiac.org |
| Address: | 266 Genesee St. Utica, NY 13502 |
