SecurityMetrics Blog

What are the HITRUST Requirements? 3 Steps To Get...

How do you become HITRUST certified? Specific HITRUST requirements are available through HITRUST’s MyCSF portal and will include various...
View Post

5 Steps to Secure Your Healthcare Organization

Securing your healthcare organization should be a priority. Healthcare organizations are especially vulnerable to attacks because they cannot...

Everything You Need to Know About How to Manage PHI

Fully understanding all the PHI you have, where it is stored, what processes touch it, and how it is used in your organization is critical to...

HIPAA Compliance Best Practices

With over 20 years in the industry, we have found that these HIPAA compliance best practices are most helpful in securing your organization.

What is the HIPAA Privacy Rule?

The HIPAA Privacy Rule establishes standards to protect an individual’s medical records and other protected health information (PHI). It concerns...

How to Implement and Maintain HIPAA Compliant Firewalls

Simply installing a firewall on your organization’s network perimeter doesn’t secure your network or make you HIPAA compliant. Proper...

Auditor Tips: Healthcare Security And Best Practices

Healthcare security gaps often stem from communication issues. It’s common to see executives and practice leads who aren’t listening to their...

Auditor Tips: Overcome Management’s Budget Concerns

If you are having problems communicating budgetary needs to management, conduct a risk analysis before starting the HIPAA process.

Auditor Tips: Penetration Testing Best Practices

A penetration test will give you a holistic view of what your security system truly looks like. Organizations with poor security practices across...

Auditor Tips: HIPAA Training Best Practices

Workforce members need to be given specific rules and regular training to know how to protect PHI. Regular training will remind them of the...

Auditor Tips: Monitor Your Business Associates’ Compliance

Every covered entity that uses business associates is required to obtain assurances that their business associates treat patient data the way you...

Auditor Tips: Minimum Necessary Best Practices

The minimum necessary requirement is a key part of the HIPAA Privacy Rule. The goal of this requirement isn’t to encourage organizations to...

Auditor Tips: Regularly Conduct Vulnerability Scans

Regular vulnerability scans are a critical preventative security control as they detect and assess known weaknesses that may be opening up your...

Auditor Tips: Set Up Your Intrusion Detection/Prevention System

You need a team to choose and manage an IDS/IPS. Whether it’s the responsibility of your IT Security Team,Data Loss Prevention Team, a managed...

Auditor Tips: Audit Logs and Log Monitoring

Monitoring audit logs for all critical systems and devices in your environment is key to understanding what types of events and actions occur on a...

Never have a false sense of security.

Talk to a specialist