Content by Marianne Kolbasuk McGee

Analyzing the Global Cybersecurity Skills Shortage

Marianne Kolbasuk McGee  •  August 3, 2016

A new survey shows 82 percent of organizations around the world are struggling with a shortage of staff with cybersecurity skills. Training expert Simone Petrella analyzes the survey results and spotlights the skills needed now to fight emerging cyber threats.

Advice on Spotting Insider Threats

Marianne Kolbasuk McGee  •  August 2, 2016

While hackers and ransomware attacks have been hogging the spotlight lately, regulators are warning healthcare entities and their business associates not to underestimate the serious security and privacy threats that insiders can pose.

HHS to Fund a Cyber Threat Information Sharing Leader

Marianne Kolbasuk McGee  •  August 1, 2016

HHS will issue up $1.75 million in grants to give a boost to one organization that will take a lead role in cyber threat information sharing. A top priority of the ramped-up effort to help fight cyberattacks in the healthcare sector is to keep smaller organizations better informed of the latest risks.

FTC Overturns Dismissal of Security Case Against LabMD

Marianne Kolbasuk McGee  •  July 29, 2016

The Federal Trade Commission has overturned a decision made last fall by its own administrative law judge to dismiss the longstanding data security enforcement case against the now-shuttered medical testing laboratory LabMD. Company CEO Michael Daugherty plans to appeal.

Congress Considers Controversial Patient ID Matching Issue

Marianne Kolbasuk McGee  •  July 27, 2016

A Congressional proposal that would allow HHS to offer technical assistance to private-sector efforts aimed at solving the problem of matching the right records to the right patient could pave the way for a significant breakthrough, says Lynne Thomas Gordon, CEO of AHIMA, which represents records professionals.

Athens Orthopedic Clinic Confirms 'Dark Overlord' Attack

Marianne Kolbasuk McGee  •  July 26, 2016

A Georgia-based orthopedic clinic has confirmed it's one of the victims of cyberattacks by "The Dark Overlord" hacker who recently posted for sale copies of stolen databases he says contain millions of records. But the clinic is tight-lipped about whether it was a victim of extortion.

2016: A Watershed Year for HIPAA Enforcement

Marianne Kolbasuk McGee  •  July 25, 2016

The nation's HIPAA enforcement agency has dramatically ramped up its issuance of breach-related financial penalties. In the ninth enforcement action of 2016, it slapped University of Mississippi Medical Center with a $2.75 million fine after a breach investigation revealed big security woes.

Technical Advice on Dealing with Ransomware

Marianne Kolbasuk McGee  •  July 22, 2016

In light of the surge of ransomware attacks in the healthcare sector this year, security risk adviser John Pironti of ISACA offers in-depth technical advice on preparing for - and reacting to - such attacks.

Preventing Breaches Involving Personal Email

Marianne Kolbasuk McGee  •  July 21, 2016

A recently reported health data breach in Colorado offers a reminder that organizations must take precautions to prevent and detect data leakage involving current and former employees inappropriately using personal email.

Big Gaps in Health Data Protection Identified

Marianne Kolbasuk McGee  •  July 20, 2016

Mobile health applications, wearable fitness trackers and even social media sites are creating new privacy risks for health information because the data collected, shared and used falls outside the regulatory scope of HIPAA, says Lucia Savage of the Office of the National Coordinator for Health IT.

HIPAA Enforcer's Latest Actions: An Analysis

Marianne Kolbasuk McGee  •  July 18, 2016

The federal agency that enforces HIPAA has been very busy lately, taking numerous steps to reiterate the importance of safeguarding patient data and stressing the need to prepare a breach response plan. But the agency still needs to improve transparency on breaches involving business associates.

$2.7 Million HIPAA Penalty for Two Smaller Breaches

Marianne Kolbasuk McGee  •  July 15, 2016

Oregon Health & Science University says it has been slapped with a $2.7 million fine after HHS investigated two data breaches that affected a total of about 7,000 individuals. It's the eighth HIPAA-related settlement announced by HHS so far this year.

Hospitals and Ransomware: The Temptation to Pay

Marianne Kolbasuk McGee  •  July 15, 2016

Some healthcare entities may be more likely than organizations in other sectors to pay extortionists to unlock data that's been encrypted in ransomware attacks because patients' lives are potentially at risk if data is unavailable, says security expert Kate Borten, who discusses risk management issues.

Organizations Facing HIPAA Audits Notified

Marianne Kolbasuk McGee  •  July 12, 2016

The Department of Health and Human Services' Office for Civil Rights has notified 167 covered entities they've been selected for remote "desk audits" of their HIPAA compliance. But the audits will focus on only a handful of requirements.

HHS: Most Ransomware Attacks Reportable Breaches

Marianne Kolbasuk McGee  •  July 12, 2016

Most ransomware attacks result in a breach of protected health information that must be reported under HIPAA, according to newly released federal guidance for healthcare entities and business associates. But is the guidance clear enough?