In the healthcare industry, HITRUST and HIPAA are often used together when speaking about regulations and compliance. Both of these concepts are incredibly important for any healthcare firm. However, they have some unique characteristics that you should know about. And truly, what is the difference between HIPAA and HITRUST? Well, hiring a HIPAA consultant is […]
ComplyAssistant’s Gerry Blass comments on the biggest threats to healthcare organizations that we should be concerned about in Healthcare IT Today’s “The Ever Evolving World of Cybersecurity Threats” article. In January 2021, HHS’s Health Industry Cybersecurity Practices (HICP) rule was signed into law. It is an extension of the HIPAA/ HITECH Security Rule and identifies […]
Kenneth Reiher, VP Operations at ComplyAssistant once said “Many organizations have a difficult time tracking their vendor relationships, let alone their implemented security controls. I recommend a strong third-party management program to complete the following: Organize all vendor relationships and associated contacts, assign an inherent risk level to each vendor based on their access to your data, […]
The New Jersey HIMSS June episode of their Customer Story podcast series features Gerry Blass, President and CEO of ComplyAssistant. Gerry joins host Mike Fortino, NJ HIMSS board member, and GalaxE.Solutions Account Executive to discuss the Health Industry Cybersecurity Practices (HICP). HICP was developed to raise awareness, provide vetted cybersecurity practices, and move organizations towards […]
The New Jersey HIMSS Digital Transformation podcast series continues with an in-depth discussion with a national leader on the topic. This episode’s guest is Angela Yochem, Chief Transformation and Digital Officer at Novant Health and Chief Operating Officer and General Manager of Novant Health Enterprises. Join your NJ HIMSS host, Jim Hennessy, CEO of e4 Services, as he […]
ComplyAssistant’s Ken Reiher attended the first annual ViVE Conference and had the following reaction and takeaway noted by Health IT Answers in their “First Annual ViVE Conference: Reactions and Takeaways” article. “Throughout my career, I have attended several healthcare conferences but, ViVE was a little different. Since the majority of attendees have not attended a […]
ComplyAssistant client St. Joseph’s Health’s Jesse Fasolo, PhD student, director, technology infrastructure & cybersecurity, information security officer, said Information security is changing so fast, healthcare systems need to work on shorter strategies so they can pivot to what’s current.
An organization’s approach to governance, risk, and compliance can have a huge effect on business. In today’s world of cyber breaches and ransomware attacks on companies of all sizes and scope, organizational leaders must work together to ensure their approach to GRC is intact.
In the 70s and 80s, healthcare organizations started to migrate their patient management information from hard copy to electronic, either on shared mainframes such as SMS and McAuto or on microprocessors. The user workstations had no intelligence and were known as “dumb terminals.” There were limited locations of electronic identifiable health information. There was no motivation to sell identifiable health information.