HIPAA Compliance and Call Centers

In a previous post titled Is It Safe to Speak? Protection for Telephone-Based Payment Card Data, I commented on the PCI SSC new requirements for call center operations and recording systems. Call center security has been a hot topic for a long time. How safe is the information that is given over...

They Changed What? HIPAA & HITECH

In 1996, the Healthcare Insurance Portability and Accountability Act HIPAA opened the door to increased exchanges of healthcare information in an effort to improve care and reduce costs. The Act included new provisions for protected health information PHI. Since there are only a few limited revie...

HIPAA Bares Its Teeth: $4.3m Fine For Privacy Violation

The health care industry’s toothless tiger finally bared its teeth, as the U.S. Department of Health and Human Services issued a $4.3 m fine to a Maryland health care provider for violations of the HIPAA Privacy Rule. The action is the first monetary fine issued since the Act was passed in 1996...

Andy Jaquith on Measuring Meaningful Information Security Metrics

The March issue of Information Security magazine is out this week. The cover story is a look at how security information management systems need to evolve, in particular by integrating identity management with SIM in order to tie policy violations to user activity. Also, expert Andrew Jaquith...

Q&A: Andy Weeks Discusses the Challenges of Reconciling Security and Compliance

Dennis Fisher: Okay, welcome to the Digital Underground podcast. This is the third in our CSO series of podcasts with high level information security professionals and I’m very happy to have on the line today my guest Andy Weeks who is the manager of risk and compliance for enterprise information...

Q&A: Larry Whiteside on the Pressures Involved With HIPAA Compliance and More

Dennis Fisher: Okay, welcome back to the Digital Underground podcast. This is the second in the series of CSO podcasts that I’m doing and I’m really excited. I’ve got Larry Whiteside on the phone. He’s the chief information security officer at the Visiting Nurse Service of New York. So we’re goin...

Health Care Breach Notification Mandated

From SC Magazine Angela Moscaritolo Two new rules were created this week requiring health care organizations, and other entities that interact with personal health records PHRs, to issue notifications in the event of a data breach. The key rule, issued Wednesday by the U.S. Department of Health a...

[VulnWatch] Blank Administrator password in DELL XP Professional install

Vulnerability in DELL Windows XP Professional - default hidden Administrator account allows local Administrator access Systems: DELLtm Laptops with Windowstm; Professional Vulnerable: DELL Laptops with pre installed Microsoft Windows XP Professional SP2 Not Vulnerable: DELL Laptops with Retail...