Privacy and security insights.
Practical guidance on privacy, security, and compliance, including HIPAA, NYDFS, DOL, Ohio public sector requirements, and the threats regulated organizations face, from the consultants who assess and audit them.
From the Eagle blog
2016: Hospitals targeted with Ransomware, patients harmed, losses incurred
Ransomware attacks are rampant throughout the healthcare industry, affecting a high percentage of organizations.
After a healthcare provider becomes a victim of ransomware, the response is typical – these organizations recognize that attacks could occur again, with impacts even more severe, and invest both in safeguards to prevent future attacks and protections to mitigate the impact should they occur.
Locky Ransomware Targets Healthcare organizations
Research shows that a massive spam campaign with “locky ransomware” has been targeting healthcare organizations. We review malware and countermeasures.
HIPAA Compliance with Google’s G Suite (Google Apps)
Eagle’s opinion is that the agreement meets the minimum requirements of a HIPAA BAA, and as such Google accepts the minimum liability in the event of a data breach which is to send you “applicable Breach notifications” via email in the event of a breach. Google will not indemnify you, reimburse you for your breach notification costs, or pay any other damages.
Ransomware Guidance from OCR
The Office of Civil Rights issued a Fact Sheet regarding Ransomware and HIPAA. During 2016, ransomware attacks have increased 300% and healthcare organizations are...
2016 is Biggest HIPAA Enforcement Year, $19 Million in Fines
While only in the 8th month of the year, 2016 is already the biggest HIPAA enforcement year as tallied by the dollar amount of fines, which exceed $19 Million. Here is...
Meaningful Use Changes for 2016
Editor's Note: Subsequent to the publication of this article, CMS has renamed the "Meaningful Use" programs to "Promoting Interoperability". Once again we are sitting...
Meaningful Use morphs into “Advancing Care Information” under MACRA/MIPS
Editor's Note: Subsequent to the publication of this article, CMS has renamed the MIPS "Advancing Care Information" category to "Promoting Interoperability". The MACRA...
OCR Details 5 Most Common HIPAA Mistakes
The Health and Human Services Office of Civil Rights (OCR) recently detailed the 5 most common mistakes that organizations make in their HIPAA compliance programs, as...
The HIPAA Internal Audit
Because the Honor System Doesn't Work Electronic record systems contain a vast trove of interesting information – which can be a great temptation for a curious employee...
Vendor Risk Highlighted by Medhost Backdoor
This month Carnegie Mellon University's CERT Division issued an advisory regarding a flaw in Medhost's Perioperative Information Management System (PIMS). PIMS is a...
Meaningful Use, PQRS and Value Modifier for 2016
Editor's Note: Subsequent to the publication of this article, CMS has renamed the "Meaningful Use" programs and MIPS "Advancing Care Information" category to "Promoting...
The PQRS replacement
The Merit-based incentive Payment System (MIPS) introduces 4 measure categories to the Medicare incentive program space. As we have mentioned in previous posts, MIPS is...
Get ahead of your next assessment or audit.
Tell us about your organization and the frameworks you answer to. We will follow up to talk through where you stand and what to tackle first.
Schedule a consultation