cybercrime international

Cybercrime Defense Right Now

Although work for many organizations slows down during the week between Christmas and the New Year, cyber criminals are not taking time off. In fact, cyber risks are much higher during holidays. Now is the time to stay extra vigilant.

We note that healthcare systems are not slowing down, since coronavirus continues to send patients to hospitals making healthcare particularly vulnerable right now. Healthcare organizations that follow HIPAA and practice good HIPAA Risk Management have a much better chance of defending against attacks, but can strengthen their defenses with key steps.

Vigilance at work is critical, but vigilance at home is important too. Everyone should learn the basics of good security to keep their data safe and their systems operational. Criminals go after all internet users, small and large.

Review New CISA Guidance

Of particular concern to the federal government is critical infrastructure – the sixteen sectors which are vital for the health and safety of the nation. The Cybersecurity and Infrastructure Security Agency (CISA) recently issued a new warning to remind organizations to increase vigilance, review key defenses and strengthen best practices right away.

CISA outlined some key actions that organizational leaders should take immediately to achieve operational resiliency, improve network defenses, and safeguard their organizations from cyber threats over the holidays.

For example, leaders should try to increase organizational vigilance by:

  • closing gaps in Information and Operational Technology (IT and OT) security personnel coverage to ensure that staff can provide continuous monitoring. Security coverage during this season is crucial since many organizations may have lower staffing during the winter holidays.
  • being ready for rapid response by adopting “a state of heightened awareness” in the event of a security incident.

Other recommendations from CISA include:

  • Ensure network defenders implement cybersecurity best practices. Enforce multi-factor authentication and strong passwords, install software updates (prioritizing known exploited vulnerabilities), and secure accounts and credentials.
  • Stay informed about current cybersecurity threats and malicious techniques. Encourage IT/OT security staff to subscribe to CISA’s mailing list and feeds to receive notifications when CISA releases information about a security topic or threat.
  • Lower the threshold for threat and information sharing. Immediately report cybersecurity incidents and anomalous activity to CISA and/or the FBI.

HIPAA Risk Management

Defense against cyber crime is central to the HIPAA Security Rule and strong HIPAA compliance is a blueprint to protect against cyber threats of all kinds.

Every recommendation in the CISA warning is mirrored in a full HIPAA Risk Analysis that follows the HIPAA Privacy and Security Rules. The HIPAA E-Tool® contains the CISA review steps, along with every best practice required for managing privacy and security risks 365 days a year. If you follow HIPAA you can lower cyber risks to a manageable level, keep patient data safe and avoid costly downtime.

The HIPAA E-Tool® makes compliance fast and easy. Get your free HIPAA Quick Start Kit, complete with a webcam privacy guard, HIPAA Hot Zone labels and a HIPAA checklist delivered directly to your office.

Share This Post

Maggie Hales

Maggie Hales is a lawyer focusing on health information privacy and security. As CEO of ET&C Group LLC she advises health care providers and business associates in 36 states, Canada, Egypt, India and the EU, using The HIPAA E-Tool® to deliver up to date policies, forms and training on everything related to HIPAA compliance.

Copyright © 2022 ET&C Group LLC.

The HIPAA E-Tool® and Protecting Patient Privacy is Our Job®
are registered trademarks of ET&C Group LLC

Terms of Service | Privacy Policy

Mailing Address
The HIPAA E-Tool
PO Box 179104
St. Louis, MO 63117-9104

Office
8820 Ladue Road Suite 200
St. Louis, MO 63124

Free hipaa kit!

hipaa compliance Quick start kit
Delivered free