“Addressable” has never meant optional under the HIPAA Security Rule. But proposed changes could eliminate much of the flexibility associated with addressable safeguards. Learn what that could mean for healthcare organizations and why now is a good time to review your current security practices.
Proposed HIPAA Security Rule updates could introduce more structured vulnerability scanning and penetration testing requirements for covered entities and business associates. Learn how the two forms of testing differ, what the proposal may require, and how healthcare organizations can start preparing now.
Network segmentation can help healthcare organizations limit how far an attacker can move after gaining access to a system. Learn why identifying where ePHI lives is an important first step and how the proposed HIPAA Security Rule could strengthen expectations around protecting critical systems.
Patch management plays an important role in protecting ePHI and reducing cybersecurity risk. Learn how the proposed HIPAA Security Rule could introduce more formal patching timelines, documentation, and annual testing requirements for covered entities and business associates.
The proposed HIPAA Security Rule places greater emphasis on encryption as a core safeguard for protecting ePHI. Learn what the proposed rule changes could mean and the practical steps healthcare organizations can take today to strengthen security and prepare for future compliance requirements.
The proposed HIPAA Privacy Rule update could reshape patient access, care coordination, and privacy requirements for covered entities and business associates. Learn what the proposed changes include, when a final rule may be published, and the practical steps your organization can take to prepare now.
If the proposed HIPAA Security Rule is finalized, healthcare organizations may have just 180 days to demonstrate compliance. Learn how budgeting for cybersecurity and compliance improvements now can help your organization avoid rushed decisions and strengthen security long before the deadline.
A Security Risk Assessment is more than a HIPAA requirement. It helps healthcare organizations understand risk, protect ePHI, strengthen documentation, and prepare for changing cybersecurity expectations.
While the HIPAA Security Rule update is not final yet, small healthcare practices can start preparing now by building or updating an asset inventory. This simple step can improve visibility, strengthen risk analysis, and support stronger ePHI protection.
HIPAA compliance has always required ongoing attention. But with proposed changes to the HIPAA Security Rule now on the table, healthcare organizations may need to prepare for a higher standard of cybersecurity, documentation, and ePHI protection. In January 2025, the U.S. Department of Health and Human Services Office for Civil Rights proposed major updates to the...
© 2026 · HIPAA Secure Now!
Recent Comments