search
Search...
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
White bold text reading 'Auditor Tips' on a dark patterned background with a blue underline.
Auditor Tips: Practicing Good Cyber Hygiene
HIPAA Audit

While every organization is different, the end goal of practicing good cyber hygiene is to identify vulnerabilities, minimize risk exposure, and reduce the potential for a breach.

White text reading 'Auditor Tips' on a dark geometric background with a small blue underline.
Auditor Tips: Know Your PHI’s Lifecycle
HIPAA Audit

Fully understanding all the PHI you have, where it is stored, what processes touch it, and how it is used in your organization is critical to enabling a business to properly handle and secure PHI.

White text 'Auditor Tips' on a dark geometric patterned background with a small blue underline.
Auditor Tips: Conduct an Accurate and Thorough Risk Analysis
HIPAA Audit

Yet a complete and thorough risk analysis is one of the best ways for you and your organization to make intelligent and informed business decisions

3D blue outlined text saying PCI 4.0 with layered line design on a light gray background.
What’s New with the SAQ A-EP
HIPAA Audit

The SAQ A-EP PCI assessment is for merchants who have an e-commerce card data flow that is not entirely outsourced to a PCI validated third-party service provider.

SecurityMetrics guide titled HIPAA Compliance for healthcare entities and business associates.
The SecurityMetrics HIPAA Guide Simplifies HIPAA Guidelines
HIPAA Audit

HIPAA laws and cybersecurity are not simple. The 2023 HIPAA Guide breaks down HIPAA guidelines into actionable steps and easy-to-understand information so that your healthcare staff can be fully educated on data privacy and protection.

Multiple copies of a blue book titled SecurityMetrics Guide to HIPAA Compliance on a dark surface.
Guide to HIPAA Compliance Simplifies Data Security and Privacy
HIPAA Audit

We created our Guide to HIPAA compliance to help you close gaps in security and compliance, ultimately helping you avoid a data breach.

'Make security training fun!' on a blue background.
Five Ways to Make Security Training Memorable
Training

One of the easiest ways to make cybersecurity training more interesting is by making it fun. Here are five tips for making workforce security training fun and memorable.

HIPAA Breach Insurance graphic.
The Cost of HIPAA Breach Insurance
Forensics

Those exorbitant fines are why cyber breach insurance exists.

Blue background with text 'Know Which SAQs You Need To Update'.
Updating PCI DSS SAQs from 3.0 to 3.2: The Changes You Should Know
PCI Trends

PCI DSS 3.2 has added and removed new requirements to the SAQs.

Screenshot showing loss, theft, and unauthorized access/disclosure of companies around the nation.
Stay Off the HHS Naughty List
HIPAA

Brand degradation and patient exodus will likely occur every time an organization shames their name through a data breach.

Illustration of a bike rider pulling a computer on a trailer.
Warbiking: Hacking with Your Helmet On
Forensics

Hackers bike around the city with their laptops in a discreet backpack (or strapped in a bike trailer) and search for unprotected wireless networks.

Illustration of red folder filled with white cards on black background.
Unencrypted Data: A Security Plague
Data Discovery

Unencrypted payment card data is relatively simple for a hacker to detect, scoop up, and steal.

Diagnosing HIPAA Security on blue background.
What Are My HIPAA Security Requirements?
HIPAA

Given the stated importance and heavy consequences associated with the risk analysis, you may want to consider working with a HIPAA security expert.

Illustration of a computer with a lock on the screen and design around.
What Antivirus Should I Use?
Data Security

Don’t let your anti-malware be your permeable safety blanket.

Should You Get An Onsite HIPAA Audit graphic.
The Pros and Cons of Onsite HIPAA Audits
HIPAA Audit

Contracting with an external professional to perform an onsite HIPAA audit might be a good option for you.

The Ultimate Guide to PCI DSS 3.0
The Ultimate Guide to PCI 3.0 Changes
PCI Trends

Here’s a list of our most popular PCI DSS 3.0 resources.

Illustration of abstract network and technology design on white background.
Welcome to the SecurityMetrics Blog
Data Security

Learn to close data security gaps and prevent data breaches at your business.

Image of a document titled 'VISA Introduces Enhanced PCI DSS Enforcement Plan.'
Visa PCI Enforcement Rules in 2015
PCI Trends

What does this new enforcement plan actually mean for noncompliant merchants and service providers?

Illustration of 'Dental Best Practices' in orange letters
The 7 Things That Prevent Dental Practice Growth
HIPAA

None of these seven suggestions requires changing or enhancing your clinical expertise.

Illustration of a hospital with the text 'Your Remote Access Connection Isn't Sure.'
The Healthcare Threat is Imminent: Secure Remote Access Now!
HIPAA

Healthcare entities must be proactive about protecting sensitive data across their organization.

Illustration of a laptop plus a phone with 'Two Factor Authentication' text.
Two Factor Authentication – Security Beyond Passwords
Data Security

Is two-factor authentication perfect? No, but it does make a hacker’s job more difficult.

Illustration of medical workers raising their hands with text 'HIPAA: Do No Harm.'
The Hippocratic Oath and Doing No Harm In The Information Age
HIPAA

Each healthcare professional has a responsibility and stewardship over the patients’ PHI they handle.

Illustration of documents and dollar bills with text 'How to Buy a PCI Policy' on blue background.
The Cost of a PCI Security Policy: What You Need to Know
Policies

The key to properly using PCI policies is communication.

Text saying 'Get your ecommerce business PCI DSS compliant' with a computer screen showing t-shirts and a buy button.
The Ultimate Cheat Sheet on Making Online PCI Compliance Work for You
PCI

Learn some tricks to getting your ecommerce business PCI compliant.