With so much data being created, sometimes it’s hard to tell what’s sensitive data and what isn’t, what’s a risk to it and what’s not. This can be especially true if you don’t work in IT or Compliance. But if you’re an employee who uses a computer, sends and receives email, texts, uploads or ...

According to Kaspersky, a company is hit by ransomware every 40 seconds. There’s a lot that goes into handling a ransomware cyberattack, not the least of which is, “Should we pay?” While IT implements the security incident response plan, Senior Management weighs the dilemma of how to respond to the ...

When you’re a medical device manufacturer, your primary goal is to get your product into hospitals and care provider networks. The internet of things (IoT), means that every medical device is built for connectivity, including those that once were standalone. Infusion pumps, monitors and MRI ...

It’s a new year with a new budget, and a new year’s resolution for laser-focus on cybersecurity. That should be easier to keep than the ones for no cookies and daily workouts, right?

It’s an all-too- common misunderstanding, but a robust information security program doesn’t mean you’re in compliance with whatever regulations govern your industry. The reverse holds true as well, being in compliance doesn’t mean your information security and privacy program is secure. So – ...

As we wrap up 2017, the number of healthcare data breaches are up over 2016, with 41% caused by “insiders” per the Protenus Breach Barometer mid-year review. Scarily, insider cybersecurity incidents affecting patients are on track to be far greater than 2016’s 2 million patients affected, with 1.17 ...

When you think about protecting sensitive data, do you think about privacy or security? It’s a trick question because the answer should be “Both.” Whether you’re thinking about data protection from insider threats or potential vulnerabilities in network security, keep in mind that while privacy and ...

As we wrap up Cybersecurity Awareness Month, keep in mind that cybercriminals are indiscriminate in who they attack. Large business, small business, it doesn’t matter. Small businesses, it seems, gets that.

For the last eighteen months or so, media coverage of healthcare hasn’t been focused so much on HIPAA regulations, but on the cybersecurity strength protecting healthcare data. Yet HIPAA’s Privacy and Security regulations remain the source from which all other privacy and security regulations, ...

Healthcare data breaches account for over 22% of the data breaches so far in 2017. To put a number on it, that’s nearly 2 million health data records. If you’re looking for an idea of what’s to come the remainder of 2017 and on into 2018, the indicators say there’s no time like the present to ...

Reported data breaches show that HIPAA violation settlements are on the upswing, both in terms of the number of individuals affected and financial cost. We’re not done with 2017, yet OCR’s updated breach portal shows that nearly 4 million individuals have been affected by over 200 healthcare data ...

We’re proud to announce that Ostendio has been shortlisted as a finalist in the “Best Technology Startup” category for the Third Annual Timmy Awards. The Timmy Awards recognizes the top workplaces for tech professionals. Ostendio joins a list of notable finalists including LiveSafe, Capterra and ...

Has your organization experienced a data breach yet? Increasingly, odds are that you will, if you haven’t already. According to Protenus, 2017 is currently on track to exceed 2016’s trend of 'one health data breach per day.’ Although ransomware is nearly unavoidable if pointed in your direction, ...

Are you always on the look out for the best InfoSec conferences to attend? We've found several helpful resources to point you in the right direction, as well as highlighting a couple of our favorites.

Are you considering HITRUST but haven’t yet put your HIPAA house in order? That’s similar to starting college when you’ve not yet earned your high school diploma. While both HIPAA and HITRUST share the common goal of protecting healthcare data and personal health information (PHI), they differ in ...