Privacy & Security
After the Change Healthcare breach, healthcare organizations are diversifying their buying strategies and asking about vendors' cybersecurity policies, says Karly Rowe, interim president of Inovalon's provider business unit.
"While the scope and impact remains unconfirmed, the nature of the reported activity presents potential risk to organizations and individuals," according to the cybersecurity agency.
The initial expiration of MITRE's contract for the Common Vulnerabilities and Exposures program was a shock to many cybersecurity experts. But the Cybersecurity and Infrastructure Security Agency quickly pledged that there would be no lapse in service.
Healthcare security incidents in 2024 highlighted third-party vendor risk and the need to prepare business continuity plans and tabletop exercises in case of attack, says Lee Kim, senior principal of cybersecurity and privacy at HIMSS.
ASTP has released the 2025 SAFER Guides, which aim to improve health systems' adherence to electronic health record best practices. They were updated by clinicians with informatics training and informaticians with clinical experience.
Garrett Weber, Akamai Technologies field CTO for enterprise security, explains how the new HIPAA security rule requires healthcare organizations to use specific technical controls, but it can also help to better position third-party risk management.
The mass layoffs have severely undercut essential IT, policy and contracting functions, and sources say they fear critical expertise has been lost. The government could hire contractors to fill the gaps, putting ousted employees in an ethical bind.
The former senior patient service associate pled guilty to the charge.
Mitigating and responding to cyberattacks can cost hospitals and health systems millions of dollars per incident. To prevent these attacks, most healthcare organizations have taken steps to safeguard their information technology (IT) network containing patient data and financial records. However, many may not realize that their operational technology (OT) network comprising staff card access, HVAC and other systems may be vulnerable as well.
Ben Wolf, partner in Alston & Bird's Health Care Group, told MobiHealthNews how FDA staffing cuts could slow device approvals and what companies can do to stay ahead.