Data encryption : PrivateSky Secure Information Exchange platform

Data encryption : PrivateSky Secure Information Exchange platform CertiVox today unveiled a breakthrough in information security: PrivateSky Secure Information Exchange SIXTM platform. The new service provides fast, easy-to-use protection for email, files and other information sent via the cloud,...

What is Your Risk Assessment Worth?

A risk assessment provides your organization with a tool to determine how, where and how much to invest in controls and security over technology. It also serves to document the risk acceptance policy of your organization as the acceptable level of risk dictates the level of controls to be...

Viruses and Vendors Can Put Healthcare Data At Risk

A recent article in Healthcare Security Info highlights that computer viruses can cause security breaches, that can then in turn compromise health care data and potentially violate the HIPAA and HITECH Act regulations. Beth Israel Deaconess Medical Center in Boston had to notify more than 2,000...

UCLA Health Services Pays $865K, Settles HIPAA Violations

The U.S. Department of Health and Human Services HHS this week announced that the University of California at Los Angeles Health Services UCLAHS has agreed to pay a $865,000 fine and pledged to tweak their infrastructure after potentially breaking the Health Insurance Portability and Accountabili...

HIPAA Compliance and Call Centers

In a previous post titled Is It Safe to Speak? Protection for Telephone-Based Payment Card Data, I commented on the PCI SSC new requirements for call center operations and recording systems. Call center security has been a hot topic for a long time. How safe is the information that is given over...

They Changed What? HIPAA & HITECH

In 1996, the Healthcare Insurance Portability and Accountability Act HIPAA opened the door to increased exchanges of healthcare information in an effort to improve care and reduce costs. The Act included new provisions for protected health information PHI. Since there are only a few limited revie...

HIPAA Bares Its Teeth: $4.3m Fine For Privacy Violation

The health care industry’s toothless tiger finally bared its teeth, as the U.S. Department of Health and Human Services issued a $4.3 m fine to a Maryland health care provider for violations of the HIPAA Privacy Rule. The action is the first monetary fine issued since the Act was passed in 1996...

Andy Jaquith on Measuring Meaningful Information Security Metrics

The March issue of Information Security magazine is out this week. The cover story is a look at how security information management systems need to evolve, in particular by integrating identity management with SIM in order to tie policy violations to user activity. Also, expert Andrew Jaquith...

Q&A: Andy Weeks Discusses the Challenges of Reconciling Security and Compliance

Dennis Fisher: Okay, welcome to the Digital Underground podcast. This is the third in our CSO series of podcasts with high level information security professionals and I’m very happy to have on the line today my guest Andy Weeks who is the manager of risk and compliance for enterprise information...

Q&A: Larry Whiteside on the Pressures Involved With HIPAA Compliance and More

Dennis Fisher: Okay, welcome back to the Digital Underground podcast. This is the second in the series of CSO podcasts that I’m doing and I’m really excited. I’ve got Larry Whiteside on the phone. He’s the chief information security officer at the Visiting Nurse Service of New York. So we’re goin...

Health Care Breach Notification Mandated

From SC Magazine Angela Moscaritolo Two new rules were created this week requiring health care organizations, and other entities that interact with personal health records PHRs, to issue notifications in the event of a data breach. The key rule, issued Wednesday by the U.S. Department of Health a...

[VulnWatch] Blank Administrator password in DELL XP Professional install

Vulnerability in DELL Windows XP Professional - default hidden Administrator account allows local Administrator access Systems: DELLtm Laptops with Windowstm; Professional Vulnerable: DELL Laptops with pre installed Microsoft Windows XP Professional SP2 Not Vulnerable: DELL Laptops with Retail...