Kirk Hale MBA, CISM, CPHIMS, CHCIO

With the increasing number of cyberattacks on healthcare, it's crucial for hospitals to prioritize cybersecurity to safeguard patient health information and safety. Last year, HHS examined the cybersecurity resiliency of US hospitals and has published recommended Cybersecurity Performance Goals (CPGs) for Healthcare and Public Health. These CPGs are grouped into Essential and Enhanced Goals and define a subset of the NIST CSF controls that may be prioritized to achieve the greatest impact on cyber preparedness. #cybersecurity #healthcare #patientprivacy #publichealth https://lnkd.in/eRSwPY4k https://lnkd.in/eJRYqt5R

37

1 Comment

Insider threats are a risk for your business as well as your vendors & consultants. Interview tough, run those background checks, have a third-party risk management program, and make sure you have a solid plan for asset management and DLP!

16

If I had a crystal ball, I'm fairly certain it would show that future regulations as well as contract requirements will increasingly require SBOM (Software Bill of Materials). It comes up quite often in multiple sector discussions. Solutions I see that offer SBOM creation also usually offer additional benefits of license analysis and enhanced vulnerability checks in open source software. And a free course... Great way to get some CPEs for those certs. I plan to take this course over the weekend. #cyber #cybersecurity #infosec #informationsecurity #SBOM

49

4 Comments

Washington DC is moving with new requirements for healthcare IT and Cyber Security. Here is an analysis of 2 major announcements in the last 2 months of 2024. Stay tuned! The rate of announcements accelerates into what looks to be a rapid-fire velocity, we will continue to digest them for you into easy to understand news letters and tactics to turn these into a significant opportunity.

20

Interesting article highlighting the importance of the CISO position and why organizations should value the insight and knowledge qualified CISOs provide.

8

Techniques for Maintaining Cybersecurity in Healthcare - Building a Robust Team: Assemble a team of credentialed professionals tailored to your healthcare organization's needs for a strong defense against cyber threats.    - Promoting Clear Communication: Maintain open lines of communication and transparent practices to protect data without overshadowing the primary mission of providing top-notch patient care.    - Focusing on Innovation: Stay ahead of cyber threats by evolving cybersecurity protocols alongside new healthcare technologies.  Ensure your partner's protocols are in alignment. With these measures, healthcare facilities can deliver excellent care limiting the worry of data breaches or compromised technology. #cybersecurity #healthcare #dataprotection

4

Looking forward to joining the DSO Technology Summit panel for the Deconstructing Cyber Threats session. The number of cyber incidents is increasing, and they all carry large risks for any organization today in this hyper-connected world. Our discussion will deconstruct some recent cyber events, unpack the implications, and provide ways to understand and respond effectively. Delighted to be part of this important dialogue! #DSOTechSummit #DSOs #DSOTech #TechinDental

99

4 Comments

Intellicomms - IT Compliance Services: Most companies don't know where to start and the task seems daunting. Intellicomms offers a comprehensive suite of IT compliance services designed to help businesses meet industry regulations and protect sensitive data. Their services include: Risk Assessment: Identifying potential vulnerabilities and risks within an organization's IT infrastructure. Policy Development: Creating tailored policies and procedures to ensure compliance with relevant regulations. Implementation and Monitoring: Implementing security measures and continuously monitoring for compliance. Incident Response: Developing plans to address security breaches and data leaks effectively. Training and Awareness: Educating employees about compliance best practices and data security. Some of the Key regulations addressed by Intellicomms include: POPI (Protection of Personal Information Act): Ensuring the secure handling and protection of personal data. ISO 27001: Implementing a robust information security management system (ISMS). GDPR (General Data Protection Regulation): Complying with EU data protection laws, especially for businesses operating in the EU or handling EU citizens' data. PCI DSS (Payment Card Industry Data Security Standard): Protecting cardholder data for businesses that handle credit card transactions. By partnering with Intellicomms, businesses can mitigate risks, enhance their reputation, and avoid costly fines and penalties associated with non-compliance.

7

It’s becoming apparent that cybersecurity training should be required for all employees. Policies need to be set to avoid incidents like these. https://lnkd.in/eDwvyeJV #protectdata #cybersecurity #learningisliving

2

What is Today's Cost ("Good Investment" ) for a CyberSecurity Program..? How about $22 Million..? Think this is (too) High..?? Then... Is $1 Billion too much..? How about $1.6BB..? The Costs of Change Healthcare (Ransomware) CyberSecurity Attack is now close to exceeding $1 Billion... (currently at $872 Million)... but projected to be between $1.35 - 1.6 BB when the while event is concluded. This includes the $22 Million Ransomware Payment to the AlphaV BlackCat criminal organization. This Cost will "eclipse that of Casino Group MGM, which didn't pay a ransom following an attack on its systems last year, and which faces recovery costs of $100 million to rebuild its systems and paying for the fallout...". 95% of Ransomware is Preventable.. CyberSecurity A-Team has an Industry-PROVEN Ransomware Methodology that will help prevent Companies from suffering a Ransomware Attack. Don't wait until it's Too Late..! (after you are Attacked) to contact them - www.CyberSecurity-A-Team .com #Ransomware #CyberSecurity-A-Team #Healthcare #MostVulnerable https://lnkd.in/g5B7fqEu

6

A lot going on in the HIPAA world, Ransomware attacks are on the rise! In 2021 we were told to follow the NIST Cybersecurity framework or HITRUST CSF, are you? This class will get you back on track and Certified!

13

Key Healthcare CIO Trends To Watch In 2025 https://lnkd.in/gQGBVYWU #healthcareIT #CIO #leadership #organizationaldevelopment #management #security #remotepatientmonitoring #AIagents #interoperability #productivity

2

Software Composition Analysis is an important security capability. It offers practical risk reduction and is also a frequent topic in state and Federal mandate deliberations. And coming up on the end of the year you may be needing a few more CPEs. (That's me) So, I'm attending this webinar due to it's importance AND it's after work hours so I can schedule it into my day (Sending this out there to all the webinar producers who plan these in the middle of a busy day). https://lnkd.in/grzXATX4

8

Concerned about your organization's ability to assess risks? ComplyAssistant's risk register can enhance visibility. https://lnkd.in/eH2VKkPW #CISOTools #EnterpriseRiskManagement #HealthcareSecurity

4

1 Comment

K3 Clouds IT professionals will assess your current cybersecurity practices, policies, and procedures to manage and mitigate vulnerabilities. #DefenseHealth #K3Clouds #ITProfessionalServices

3

Quick Action Saves Dr. Williams' Practice! 🛡️ A potential disaster was averted thanks to Microwize’s proactive IT monitoring and quick actions. See how our team's rapid response kept patient data safe. #Microwize #cybersecurity #managedIT #datasecurity #medicalpractice

6

🔐 HIPAA Compliance Tip of the Day – Are You Conducting Vendor Risk Assessments? Vendors with access to PHI can introduce significant risks to your organization if their security measures are inadequate. Evaluating your vendors' risk profiles is crucial for maintaining HIPAA compliance. 👉 Today’s Tip: Perform thorough risk assessments on all vendors and ensure they have proper security measures in place. Verify that Business Associate Agreements (BAAs) are up-to-date and explicitly outline their HIPAA responsibilities. Regularly review and audit vendor practices to ensure continued compliance. Managing vendor risks is a key part of your overall security strategy. For more information about how we can help, please reach out to us here on LinkedIn or check out our website: https://lnkd.in/gCqR6v2j #HIPAA #VendorRiskManagement #BAA #HealthcareCompliance #PHIProtection

1