Type something to search...

Cybersecurity

Ransomware and the Small Medical Practice: What Happens, What HIPAA Requires, and What Preparation Looks Like

Ransomware and the Small Medical Practice: What Happens, What HIPAA Requires, and What Preparation Looks Like

The call comes on a Monday morning. The front desk opens the office and the EHR will not load. The schedule for the day is inaccessible. Patient charts are unavailable. There is a message on the scre

read more
Is My IT Company Handling HIPAA? Five Questions That Reveal the Gap

Is My IT Company Handling HIPAA? Five Questions That Reveal the Gap

The question comes up almost every time I talk with a small practice administrator: "Doesn't our IT company handle all of that?" It is a reasonable assumption. The practice pays a monthly fee to an

read more
What a HIPAA Security Risk Analysis Actually Requires (And Why Most Small Practices Have Never Done One)

What a HIPAA Security Risk Analysis Actually Requires (And Why Most Small Practices Have Never Done One)

When OCR investigates a small practice after a breach, one of the first things it asks for is documentation of the practice's Security Risk Analysis. Not a summary of security measures the practice b

read more