William A Retana

The government is taking steps to bolster healthcare cybersecurity with a new bill. It can't come soon enough. Check out the details here: https://lnkd.in/g5eTPNVD #Cybersecurity #Healthcare #GovernmentAction

64

3 Comments

🚨 New Video Alert! Our latest video just dropped, and you don't want to miss this one. We’re giving fresh update into the recent Ascension Health Care ransomware attack that has been wreaking havoc across 142 hospitals in the U.S! Why should you watch? 👉 Real Stories: Hear testaments from nurses and doctors on the front lines, dealing with the fallout and risking patient safety. 👉 Exclusive Insights: Find out how this attack has been impacting patient care and hospital workers. 👉 Big Implications: Understand what this cyberattack means for the future of cybersecurity in the healthcare industry. 📺 Watch the full video now: https://lnkd.in/eyncK7_X #Cybersecurity #Healthcare #Ransomware #AscensionHealth #AscensionHospital #AscensionHealthCare #AscensionHealthCareCyberAttack #CyberAttack #HospitalCyberAttack

1

As more and more devices are becoming connected, in particular IoMT devices, the already critical vigilance around Cybersecurity has taken on even more importance. Centralizing the management of your IoT and IoMT devices is a major factor in successfully combatting Cyber attacks.

13

Healthcare and healthtech companies need good cybersecurity insurance. Here are some guidelines to consider as you look for coverage. Do as much risk reduction in-house as you can. This includes the risk assessment. Don't try to insure for negligence. $2M is a good number I often suggest for companies (most of them) in the tier that caps out HIPAA fines at $1.5M. Make sure you get coverage for HIPAA fines, maybe referred to as "administrative penalties" or some other technical term. Just like your car insurance doesn't pay your parking tickets, standard liability insurance may not cover fines, unless you ask. Startups may need less coverage. No one spends a million dollars to protect a million dollar asset, so your coverage should be appropriate for your current size and revenue. Watch out for low sublimits on common events like social engineering. You might have a million aggregate coverage but a sublimit could surprise you at the worst possible time. Since a cyberattack can literally destroy your business, you probably should insure for something around your current valuation. Re-visit as you grow. More value means more risk. Also revisit as your patient database grows. More patients means bigger impact and more expenses when a data breach happens. If you are just starting, 500 patients is a threshold you should watch. Premiums are highly negotiable, so don't accept the first quote you get. I just had a client negotiate a 15% reduction on their premium renewal, along with better sublimits, because they've got great documentation now on their risk management program. I wish I could tell you the insurance savings will entirely pay for the risk assessment. It won't. But it'll help. Don't panic. If you have a proactive risk management program, a thorough and up-to-date risk assessment, business associate agreements with vendors, modern cybersecurity controls, and maybe a few policy and procedure documents, you have little to fear from HIPAA fines. Pay your premium and get back to work.

3

Warning ⚠ : Your disparate systems are putting your organization at risk! Watch below for more information.

1

Good #cybersecurity posture needs to include understanding where your vulnerabilities are. This year's events brought the EDI Gateway to the forefront of the conversation. Check out some quick tips as a starting point to having this conversation with your team.

3

A recent report from the Office of Inspector General (OIG) has sparked discussions about the effectiveness and utilization of HRAs. However, a closer look reveals that the findings may not fully capture the potential benefits these arrangements offer to both beneficiaries and health plans. HRAs can play a crucial role in enhancing care coordination and empowering members to manage their health costs effectively. They provide tailored financial support, making healthcare more accessible and improving overall member satisfaction. It's important to note that not all diagnoses identified through an HRA or chart review are considered for risk adjustment payments. For instance, if an individual has multiple diagnoses within the same Hierarchical Condition Category (HCC), only the most severe condition is counted, which can impact the financial support available for their care. As we navigate the evolving landscape of Medicare Advantage, let’s advocate for informed policies that recognize the comprehensive needs of our seniors and enhance the role of HRAs in their care journey! 💙 #MedicareAdvantage #HRAs #HealthcareInnovation #PolicyAdvocacy https://lnkd.in/erwBaK9q

2

"Many hospital executives contend with older legacy IT systems that are vulnerable to cyberattacks and may violate HIPAA requirements." A recent article published by Becker's Hospital Review highlights the growing concerns around outdated IT infrastructure in healthcare settings, emphasizing the need for robust cybersecurity measures and modernized systems to protect sensitive patient data. Click here to learn more: https://lnkd.in/e2KfPPht Outdated IT infrastructure can lead to significant data breaches, potentially resulting in financial losses, reputational damage, and compromised patient care. At e4health, we understand the critical challenges hospitals face with legacy systems. Our specialized solutions for legacy data migration and legacy system support are designed to address these vulnerabilities and ensure HIPAA compliance. Our team of industry veterans in Health Information Management (HIM) and Health Information Technology (HIT) develop tailored strategies for secure, complete, and accurate data migration. We also offer flexible managed application support services, including break/fix and routine maintenance, to keep your systems running smoothly. By partnering with e4health, healthcare organizations can confidently navigate the complexities of legacy system management, ensuring data integrity, improving patient outcomes, and maintaining operational efficiency. Our expertise empowers healthcare organizations to focus on delivering quality patient care while we handle the intricacies of their IT infrastructure. Is your healthcare organization prepared to protect against legacy system vulnerabilities? Schedule a call with our Health IT Consulting experts today and take the first step towards a more secure and efficient future. Contact e4health today: https://lnkd.in/e95A5nkS

13

ClinIntell's webinars are a treasure trove of information on sustainable clinical documentation improvement and serve as a roadmap to success through physician engagement. Follow the link below to access our catalog of available sessions, and let me know which one you find most valuable

4

Health care reforms could use a shakeup in 2025. Learn how: Medical Policy for most of America in created in conjunction with a Single Source and Healthcare coverage and payment is determination is already highly centralized. https://lnkd.in/eq9Ys4uX Big fan of AHealthcareZ and Eric Bricker, MD.

8

The 2025 CMS PFS Final Rule: The Five-Pronged Strategy Towards Comprehensive Accountable Care Dave Halpert's analysis #CMS #eCQMs #MIPS-CQMs #MedicareCQMs https://lnkd.in/gEg_SKTE

2

Navigating complex compliance with frameworks like HIPAA, HICP, and NIST? 📜 ComplyAssistant's GRC software has you covered. Request a demo to see how it can streamline your compliance efforts. https://lnkd.in/g6kptnu #ComplianceManagement #GRCSolutions

1

You don’t want to sit in a little white room and explain that a flood swept compliance-governed data away. 😥 Build a compliant and reliable #BusinessContinuity plan with our blog series @ https://hubs.ly/Q02lntVj0 #DisasterRecovery #CloudComputing #BDR

2

🔒 Protect Patient Data with Encryption for HIPAA Compliance In healthcare, safeguarding sensitive patient information is crucial. Data encryption is essential for HIPAA compliance, acting as a digital shield to protect patient data from unauthorized access. Here’s why data encryption is key: -Enhanced Security: Protects against data breaches by making intercepted data unreadable. -Data Integrity: Ensures patient information is accurate and tamper-proof. -Compliance: Demonstrates your commitment to HIPAA regulations. Read more here: https://lnkd.in/e4CegVyB #HIPAA #DataEncryption #HealthcareCompliance #PatientPrivacy #ComplyAssistant

5

#Healthcare companies: what are you doing to stem the loss of #data, functionality, or confidential patient information? 👩‍⚕️👨‍⚕️ Becker's Hospital Review recommends finding a #cybersecurity partner focused on the #healthcare industry to ensure you can continue making expert care provision your main priority . . . instead of #cyberattacks. 🏥💉 We don't mean to brag or anything, but in their own words: "Trustwave provides a flexible portfolio of services to healthcare organizations designed to protect their specific infrastructure, networks, and data while remaining HIPAA and HITECH compliant." Gosh, we're blushing! 😊 Check out their article below for the full details: https://hubs.ly/Q02zs7Bw0 Or visit our website to discover how we modernize your #cyber strategies for a more robust, resilient approach that's unique to the healthcare sector 💊👇 https://hubs.ly/Q02zsl4Q0 beckershospitalreview #BeckersHealthcare #Trustwave

7

https://lnkd.in/e9Sy-97f This article is alarming event underscores the pressing need for enhanced cybersecurity measures across all sectors, particularly in healthcare. Key Insights: Nature of the Breach: The breach involves a substantial theft of data, potentially including personal health information (PHI) and other sensitive details. The repercussions of such breaches can be profound, affecting both individuals and the broader healthcare system. Immediate Response: It is crucial for the Florida Department of Health to swiftly implement their incident response plan, which includes notifying affected individuals, cooperating with law enforcement, and conducting a thorough investigation to understand the breach's scope and origin. Preventive Measures: Regular Security Audits: Consistent and comprehensive security audits can help identify vulnerabilities before they are exploited. Employee Training: Continuous education on cybersecurity best practices is essential to ensure all staff members are aware of potential threats and know how to respond appropriately. Advanced Security Technologies: Investing in advanced security solutions such as encryption, intrusion detection systems, and multi-factor authentication can significantly enhance data protection. Long-Term Strategy: Strengthening Cyber Defenses: This incident should serve as a wake-up call for all healthcare organizations to reassess and strengthen their cybersecurity frameworks. Collaborative Efforts: Collaboration between public and private sectors, including sharing threat intelligence and best practices, is vital in building a resilient cybersecurity infrastructure. Call to Action: Organizations must prioritize data protection to maintain trust and safeguard the privacy of individuals. As professionals, we should advocate for stronger cybersecurity policies and practices within our networks and industries. #CyberSecurity #DataBreach #HealthcareSecurity #DataProtection #Privacy #FloridaHealthDepartment #Infosec #HealthIT

10

1 Comment