Risk Management

CMS last week cracked down on noncompliance by pausing the redetermination process in several states.

<p>Understand what is written – and what is not – in HIPAA requirements, says Chad Peterson, managing director at NetSPI.</p>

<p>Telehealth providers have until August 12 to come into OCR compliance, with the end of PHE provisions, says HHS Office for Civil Rights Director Melanie Rainer.</p> <p> </p>

The company's primary focus is on employers with 25-200 employees.

The Gen App Builder will be used in clinical workflows to unite information and improve patient outcomes.

<p>Dr. Eric Liederman, director of medical informatics for the Permanente Medical Group, describes how the shared security governance within the Kaiser Permanente organization helps strengthen its cybersecurity posture.</p>

<p>ComplyAssistant CEO Gerry Blass and University Hospital CISO Frank Sinatra discuss the Health Industry Cybersecurity Practices (HICP) guide, which aims to prevent threats coming from phishing, ransomware, data loss and attacks against connected medical devices.</p> <p> </p>

<p>Michelle Ramim, assistant professor of health informatics at Nova Southeastern University, said international standards for wearable data protection should be established, as was the case for WiFi transmission.</p> <p> </p>

<p>R David Moon, chairman and founder of Arx Nimbus, said point solutions encourage a reactive approach to cyber threats, and that a proactive approach to risk is needed.</p> <p> </p>

<p>Lee Kim, senior principal of cybersecurity and privacy at HIMSS, says that about 12 percent of respondents to a 2022 healthcare cybersecurity study experienced a ransomware attack.</p> <p> </p>