When critical healthcare systems go offline, patient care doesn’t stop, but everyday operations become more challenging. The Luminis Health incident highlights why healthcare organizations need effective downtime procedures, trained employees, and a practical cybersecurity incident response plan. Discover how to prepare your team before an incident occurs.
Are your organization’s cybersecurity fundamentals actually working? This Cybersecurity Awareness Month, healthcare leaders can use six practical questions to evaluate employee readiness, Security Risk Analyses, ePHI protection, MFA, software updates, and ongoing training. Learn how to identify gaps and strengthen cybersecurity habits throughout the year.
Cybersecurity training doesn’t have to mean another lengthy meeting. These four five-minute cyber huddles give healthcare teams practical scenarios to discuss, from suspicious IT requests and unexpected MFA prompts to protecting patient information and responding to EHR downtime. Learn how short conversations can reinforce safer cybersecurity habits throughout the year.
Cybersecurity Awareness Month is an opportunity for healthcare organizations to revisit the fundamentals. Strong, unique passwords remain one of the simplest ways employees can help protect sensitive information, accounts, and critical systems.
Cybersecurity Awareness Month is an opportunity to turn awareness into action. Throughout October, HIPAA Secure Now is sharing practical resources healthcare organizations can use to strengthen cybersecurity conversations, reinforce safer employee habits, and keep their workforce prepared all year long.
Having an incident response or disaster recovery plan is only the beginning. Proposed HIPAA Security Rule changes could introduce more specific requirements for response planning, testing, and restoring critical systems. Learn why healthcare organizations should use this time to make sure their plans actually work.
Workforce security goes beyond annual HIPAA training. Learn how proposed HIPAA Security Rule changes could introduce more specific expectations for employee training, security reminders, documentation, and timely removal of access to ePHI.
Signing a Business Associate Agreement is an essential part of HIPAA compliance, but effective vendor management does not stop there. Learn how healthcare organizations can identify, assess, monitor, and securely offboard vendors to better protect PHI and reduce third-party risk.
“Addressable” has never meant optional under the HIPAA Security Rule. But proposed changes could eliminate much of the flexibility associated with addressable safeguards. Learn what that could mean for healthcare organizations and why now is a good time to review your current security practices.
Proposed HIPAA Security Rule updates could introduce more structured vulnerability scanning and penetration testing requirements for covered entities and business associates. Learn how the two forms of testing differ, what the proposal may require, and how healthcare organizations can start preparing now.
© 2026 · HIPAA Secure Now!
Recent Comments