Compliance Tips
4 Free Tools for Healthcare Compliance Management
Because our healthcare compliance consultants have been in this industry for so long, we’ve been able to combine and share our expertise in these free healthcare compliance management tools, available 24/7 on our website.
What is Compliance Management Software? The Fundamental Guide
Is your organization looking to purchase a compliance management software solution? Do you know what features and functionality to look for? ComplyAssistant’s Fundamental Guide to Compliance Management Software is your handbook for purchasing the right solution for your healthcare organization.

Ensuring a solid medical device cybersecurity program
The need for appropriate medical device cybersecurity is critical. Healthcare organizations must protect their patients, and any sensitive data, by implementing and enforcing a solid medical device cybersecurity program.
What is Vendor Risk Management? The Fundamental Guide
This fundamental guide walks you through definitions, strategies, roadblocks and solutions to build a strategy that works for your organization.

5 Reasons To Take Your Healthcare Compliance Audits Mobile
If you’re still doing HIPAA audits the old-fashioned way with pen and paper, you’re missing out on valuable time savings, and you could be making critical errors in the back-end reporting of healthcare compliance audit information.
A Guide To The NIST Cybersecurity Framework
Cyberattacks. It’s rare to turn on the news without hearing about a major organization that has become the victim of an online assault. Unfortunately, much more cybercrime is taking place under the media’s radar, and large corporations and national governments aren’t the only targets. Local governments, small business and healthcare organizations are prime targets for attackers.
Data Breach Litigation: What You Need to Know
As sensitive data breaches become increasingly commonplace, many individuals are seeking to hold breached organizations responsible for the violation of their privacy. As a result, class- action lawsuits have emerged as a popular trend in the world of data breach litigation. With the rapid increase in this type of legal action, healthcare organizations must take measures to prevent data breaches. The first step to prevention is understanding why class-action lawsuits are on the rise as a response to data breaches.
Building Your Medical Device Cybersecurity Protocol
Medical device cybersecurity has become significantly more important in the age of digital health. There are essential actions health systems must take to protect themselves – and their patients. This blog offers 5 guidelines to evaluate and maintain your medical device cybersecurity.

From 300 to 36: Reducing Hurdles in Business Associate Assessments
Business associate assessments are notoriously burdensome and time consuming for both covered entity and the business associate (BA). But the typical 300-question survey can be significantly narrowed by focusing on the most critical and problematic issues.
HIPAA and Social Media – The Need for Policies and Training
Healthcare organizations and their third party vendors have an obligation to the federal government and their patients to abide by the HIPAA regulations. Unfortunately the very foundation of social media opposes everything in relation to the privacy, security, and confidentiality of information. Social media allows for anyone to see your organizations information, at any time, in any part of the world.
Why Empowering the CISO is Important for Healthcare Information Security Risk Management
We are starting to see Chief Information Security Officers (CISOs) reporting outside of Information Technology (IT). This makes sense because the CISO needs to be able to audit the IT controls and give an unbiased report to senior management.
HIPAA-HITECH Security – Why Pay for “Nothing”?
We read about healthcare organizations that get fined by the OCR for basically doing nothing, meaning that they have a general lack of evidence of due diligence for HIPAA.