Covered Entity Concept Under HIPAA: What You Need to Know

January 23, 2024January 21, 2024 by Daniel Ihonvbere

A covered entity under HIPAA is an institution or an organization that must comply with the HIPAA Privacy Rule, the HIPAA Security Rule, and the HIPAA Breach Notification Rule.

If you are a business owner in the Austin, Texas area, you may have heard of the concept of covered entity under HIPAA, the Health Insurance Portability and Accountability Act of 1996.

HIPAA is a federal law that protects the privacy and security of health information and gives patients certain rights regarding their health records. HIPAA also sets standards for how health information is transmitted and stored electronically.

But what does HIPAA and its covered entity mandate mean for your business? Do you have to comply with HIPAA rules? How can you avoid HIPAA violations and penalties? These are some of the questions that we will answer in this blog post, written by a local expert HIPAA consultant.

Cybersecurity Risk Management: How to Identify and Manage Cybersecurity Risks for Your Organization

January 5, 2024 by Daniel Ihonvbere

Cybersecurity Risk Management: How to Identify and Manage Cybersecurity Risks for Your Organization

A cybersecurity risk management program is a vital process for any organization that relies on information systems and data to carry out its business functions. A program to manage cybersecurity risks can help protect an organization’s information systems and data from cyber threats, align its security efforts with business goals, and comply with relevant standards and regulations.

Cybersecurity risks are the potential threats that could compromise the confidentiality, integrity, or availability of your organization’s information systems and data. Cyberattacks, natural disasters, human errors, and other factors can expose your organization to various cybersecurity risks, such as data breaches, ransomware, denial-of-service, phishing, and more. These risks can have serious consequences for your organization, such as financial losses, reputational damage, legal liabilities, and regulatory penalties.

Therefore, it is essential for your organization to implement a cybersecurity risk management program, which is a strategic approach to identifying, prioritizing, managing, and monitoring cybersecurity risks.

How to Build a Cybersecurity Program for An Organization

December 30, 2023December 28, 2023 by Daniel Ihonvbere

How to Build a Cybersecurity Program for Your Organization

Cybersecurity is the protection of your information and systems from unauthorized access, damage, or theft. Cybersecurity is not only a technical issue, but also a business issue. It affects your reputation, customer trust, legal compliance, and operational efficiency.

If your organization has no formal cybersecurity department or structure, no formal policies, standards, or guidelines identified or implemented, and no physical security infrastructure, you may be vulnerable to cyberattacks that can compromise your data, disrupt your operations, and harm your stakeholders.

In this blog post, we will highlight how you can build a cybersecurity program from scratch.

NBA Fines And Non-Compliance Lessons for SMBs

December 27, 2023December 25, 2023 by Daniel Ihonvbere

NBA Fines And Non-Compliance Lessons for SMBs

Regulations on the local, state, and federal levels are on the rise and this is putting a lot of pressure on compliance efforts of Small and Medium-sized businesses (SMBs) and exposing the fact that these organizations can only avoid costly fines and/or lawsuits for non-compliance by maintaining strict compliance throughout their information management processes.

I found the fines levied by the National Basketball Association (NBA) on players including the likes of the late Los Angeles Lakers Great, Kobe Bryant, and Mark Cuban, the owner of the Dallas Mavericks basketball team, among others, as a good lesson on the cost of non-compliance.

The NBA has consistently fined players who were in non-compliance of its rules and these violations range from the serious to what one could argue is the absurd – like kicking a ball in frustration or throwing a basketball into the stands in celebration of a win.

SOAR: Security Orchestration, Automation, and Response

December 21, 2023 by Daniel Ihonvbere

Security Orchestration, Automation, and Response (SOAR) is a security tool that helps organizations detect data breaches and malicious activities by constantly monitoring and analyzing network devices and events. It is a comprehensive security solution that consists of various components working together to provide a seamless security experience.

In this blog post, we will explore the concept of SOAR and its components in detail.

What is SOAR?

SOAR is a security tool that automates the process of detecting and responding to security incidents. It collects alerts from devices all around the organization’s network, collates them centrally, relates alerts to each other, notifies us of suspicious things we need to worry about, and does something about them into the bargain. It is a valuable tool for organizations that want to improve their security posture and reduce the time it takes to respond to security incidents.

ISO 27001 Risk Assessment: An Internal Auditor’s Perspective

December 18, 2023December 18, 2023 by Daniel Ihonvbere

A Comprehensive Guide to Mastering ISO 27001 Risk Assessment from An Internal Auditor’s Perspective

In the dynamic landscape of cybersecurity, organizations must stay vigilant to protect sensitive information and ensure the integrity of their systems. For this purpose, the ISO 27001 standard serves as a beacon, providing a robust framework for information security management. One of the cornerstone practices within ISO 27001 is the risk assessment process, a critical aspect that internal auditors play a pivotal role in executing.

As an ISO 27001 internal auditor, understanding the elements of a robust risk assessment is crucial.

In this article, we will delve into the key components of an ISO 27001 risk assessment, providing real-world examples to illustrate their significance.