On Tuesday April 22nd, myself and Ostendio’s CEO, Grant Elliott, attend DCA LIVE’s 2018 BIG Cyber Growth Summit. As a cybersecurity product company headquartered in the greater Washington DC area, I found it very interesting to learn that only 11% of the 177-pure play cyber firms sell a product – ...

Study Shows that Healthcare's Internal Security Breaches Exceed External Ones Was that Lady Gaga in the emergency room? What kind of procedure is my ex having? If you’re a healthcare organization, curiosity is one reason why your employees are a data security threat. Yes, the recent Verizon DBIR ...

Phishing is quickly evolving to take advantage of that most difficult-to-prevent vulnerability: human error. A lack of security awareness can lead to an unsuspecting employee clicking on one innocuous looking email, launching the cyber-criminal's malignant malware. There goes the network. To put a ...

If you collect any EU resident’s identifying data as broadly defined under the EU’s General Data Protection Regulation, aka GDPR, you now have another set of privacy and security regulations with which to comply. Do you know what you need to do to get ready by 25 May 2018? Whether your company is ...

One of the key objectives when developing an effective security and compliance management program is to remain interdependent of core systems. While some integrations can offer significant time saving such as Single Sign-On, Ticketing, and Asset Management, typically there are more sophisticated ...

Security certifications are fast becoming need-to-haves for vendors and technology firms.

If you’re reading this blog, you’re likely very aware that HITRUST certification and its proprietary MyCSF (Common Security Framework) is increasingly becoming the default choice for healthcare organizations. According to HITRUST’s over 80% of hospitals and health plans with over 500,000 members ...

With so much data being created, sometimes it’s hard to tell what’s sensitive data and what isn’t, what’s a risk to it and what’s not. This can be especially true if you don’t work in IT or Compliance. But if you’re an employee who uses a computer, sends and receives email, texts, uploads or ...

According to Kaspersky, a company is hit by ransomware every 40 seconds. There’s a lot that goes into handling a ransomware cyberattack, not the least of which is, “Should we pay?” While IT implements the security incident response plan, Senior Management weighs the dilemma of how to respond to the ...

When you’re a medical device manufacturer, your primary goal is to get your product into hospitals and care provider networks. The internet of things (IoT), means that every medical device is built for connectivity, including those that once were standalone. Infusion pumps, monitors and MRI ...

It’s a new year with a new budget, and a new year’s resolution for laser-focus on cybersecurity. That should be easier to keep than the ones for no cookies and daily workouts, right?

It’s an all-too- common misunderstanding, but a robust information security program doesn’t mean you’re in compliance with whatever regulations govern your industry. The reverse holds true as well, being in compliance doesn’t mean your information security and privacy program is secure. So – ...

As we wrap up 2017, the number of healthcare data breaches are up over 2016, with 41% caused by “insiders” per the Protenus Breach Barometer mid-year review. Scarily, insider cybersecurity incidents affecting patients are on track to be far greater than 2016’s 2 million patients affected, with 1.17 ...

When you think about protecting sensitive data, do you think about privacy or security? It’s a trick question because the answer should be “Both.” Whether you’re thinking about data protection from insider threats or potential vulnerabilities in network security, keep in mind that while privacy and ...

As we wrap up Cybersecurity Awareness Month, keep in mind that cybercriminals are indiscriminate in who they attack. Large business, small business, it doesn’t matter. Small businesses, it seems, gets that.