Compliance Management

A lawsuit against Northeast Radiology and Alliance HealthCare alleges negligence and inadequate security, following a nine-month data breach caused by PACS flaws.

Instead, Centers for Medicare and Medicaid Services policies and procedures rely on the enterprise risk management processes from the Department of Health and Human Services, rather than its own requirements.

Pundits and cyber experts alike praise bill, which would empower CISA and the Department of Veterans Affairs to establish and operate the workforce development programs.

Health care providers are increasingly facing the risk of lawsuits amid the rise in data breaches. The recent Supreme Court decision on “actual harm” may curtail the financial impact.

While lawmakers behind a new bipartisan bill argue that the use of offensive hacking could be a powerful deterrent, security experts worry that such reactionary legislation might do even more harm.

The same regulations that require swift reporting of breaches demand only modest details to be delivered to customers. That leaves health care organizations to decide for themselves how transparent they choose to be – and to manage the consequences of those decisions.

A partnership of non-profit groups hopes to bring SMBs in Hawaii up to snuff with Defense Department cyber standards, and if that succeeds, export the program nationwide.

Industry groups are concerned that contractors may lack crucial details, context and authority for reporting requirements in the cyber executive order.