Security Compliance

HIPAA In Court & Bogus HIPAA "Certifications"

HIPAA enforcement within the U.S. officially got underway with the first sanction applied the the Department of Health and Human Resources (HHS) in July; I blogged about it here.

The Need For Information Security & Privacy Training & Awareness

U.S. HIPAA (Non)Enforcement's Bigger Hammer

Last fall the U.S. Department of Health and Human Services (HHS) contracted the help of Pricewaterhouse Coopers (PwC) to start doing HIPAA compliance audits for them.

Trust Is Not A Control

Trust is very important to successful business.  Trust is a result of validated reliance upon another person or entity.

Trust is NOT a control.

The U.S. FTC Is Losing A Great Privacy Watchdog

I was surprised to see an announcement from February 28 that U.S. Federal Trade Commission (FTC) Chairman Deborah Platt Majoras is leaving the FTC at the end of March.

The Great Managed Perimeter Security Services Swindle

Maybe that is too harsh a title to describe most "managed services" provided by vendors to clients....maybe not?!

The question needs to be asked though. When is the last time a client seriously looked at what they were getting for their large investment and asked some questions of the vendor and most importantly of themselves.

Good Compliance Practices - Ignorance is No Longer Bliss

If the Payment Card Industry Data Security Standard (PCI DSS) has done one thing, it’s been to highlight that there are such things as basic, good security practices.

Syndicate content
This website is copyright © 2007 for ITSecurityLink.com. All rights are reserved.
Use of this website signifies your agreement to our terms of use and privacy policy.