In today's environment of data breaches, identity theft, fraud, and increasing connectivity, HIPAA Privacy and Security rules are a responsibility to your patients and your clients. HIPAA isn't about compliance, it's about patient care.
…
continue reading

1
The Medcurity Podcast: HIPAA Compliance | Security | Technology | Healthcare
Medcurity: HIPAA Compliance
Healthcare is complicated. Joe Gellatly and Amanda Hepper are here to help, guiding us through the biggest issues and updates in healthcare security and compliance. From HIPAA Risk Assessments to the dark web, learn what factors are affecting the security of healthcare information and how to protect your data. Tune in for news, advice, and more.
…
continue reading
HIPAA compliance is complicated, confusing and easy to get wrong. Violations, data breaches and ransomware attacks are everywhere in healthcare. HIPAA Critical brings interviews with leaders in cybersecurity, InfoSec, healthcare, and compliance straight to you. Each 30-minute episode is designed to keep you informed and entertained. A new episode is released on the first three Wednesdays of every month.
…
continue reading
https://petronellatech.com and our sponsor at https://compliancearmor.com present Cybersecurity and Compliance with Craig Petronella Podcast. Learn the latest on the CMMC 2.0, DFARS, NIST, HIPAA, GDPR, ISO27001 and more. Learn about the most current IT security threats in ransomware, phishing, business email compromise, cybercrime tactics, cyberheist schemes, and social engineering scams, as well as tips and tricks from leading professionals to help you prevent hackers from penetrating your ...
…
continue reading

1
HIPAA, Hackers, and Havoc – A Cybersecurity Reality Check - Ep 501
56:16
56:16
나중에 재생
나중에 재생
리스트
좋아요
좋아요
56:16Buckle up, folks—this episode is a rollercoaster of cyber chaos! We kick things off with a quick chat about the upcoming PriSec Boot Camp (because let’s be real, who doesn’t love a good security boot camp?). But then, we dive headfirst into the madness: a fresh HIPAA smackdown over right-of-access failures, a rogue IT guy who locked down an entire …
…
continue reading
The HIPAA Right of Access lets patients get their medical records with ease—and we’re here to help you make it happen smoothly! This episode covers the rules, from timelines to exceptions, using a recent Oregon case to show what to watch for, and shares clear steps to stay compliant. Join us to keep your processes on track and your patients happy! …
…
continue reading

1
500 Episodes Later – The Threats Are Worse But So Are Our Jokes - Ep 500
44:55
44:55
나중에 재생
나중에 재생
리스트
좋아요
좋아요
44:55500 episodes. A whole decade. Countless cybersecurity threats (and just as many dad jokes). Somehow, we’re still talking about the same cybersecurity nightmares—only now with fancier threats and AI-powered scams. In this milestone episode of Help Me With HIPAA, we take a trip down memory lane—reminiscing about our early struggles, the evolution of …
…
continue reading

1
11 Things the Government Might Ask For in an Audit | Medcurity Live 085
7:58
7:58
나중에 재생
나중에 재생
리스트
좋아요
좋아요
7:58Facing an audit can feel overwhelming, but knowing the 11 key things the government might ask for can keep your healthcare organization prepared. This episode breaks down what those requests—covering security risks and compliance—mean and how to have the right documentation ready. Tune in to get the insights you need to stay ahead of HIPAA requirem…
…
continue reading
Cybersecurity: It’s like flossing—we all know we should do it, but a shocking number of people just…don’t. This week, we’re digging into the annual cybersecurity attitudes and behaviors report, which reveals just how careless people are with their passwords, personal info, and, well, basic online survival skills. But don’t worry, AI is here to save…
…
continue reading
Credential stuffing could be the silent killer of your healthcare security—imagine hackers slipping in with just one reused password, exposing patient data and triggering massive fines. We break down how these sneaky attacks exploit password habits on the dark web, why they’re a goldmine for cybercriminals targeting medical records, and the simple …
…
continue reading
Cybersecurity report cards are in, and let’s just say—most companies would be grounded if their IT security grades were real school grades. With over 80% of Fortune 500s scoring a D or F, and healthcare companies hovering around the danger zone, it's clear that many organizations are securing data about as well as a cardboard vault. Just ask Warby …
…
continue reading

1
Outdated Systems, Modern Solutions | Medcurity Live 083
11:58
11:58
나중에 재생
나중에 재생
리스트
좋아요
좋아요
11:58Outdated systems are a major security risk—but modern solutions can bridge the gap. In this episode, we explore how legacy tech leaves healthcare organizations vulnerable and what steps you can take to strengthen security without a complete overhaul. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPA…
…
continue reading
AI just leveled up, and we’re here to talk about it! In this episode, we dive into DeepSeek—the AI model that shook up the stock market, gave OpenAI a run for its money (literally), and is both insanely cheap to run and totally open-source (which is equal parts exciting and terrifying). We also break down the rise of deepfake scams, AI’s growing ro…
…
continue reading

1
HIPAA in Crisis: Preparing for Emergencies | Medcurity Live 082
10:42
10:42
나중에 재생
나중에 재생
리스트
좋아요
좋아요
10:42How does HIPAA work when every second counts? Learn how emergency provisions let healthcare providers quickly share the essential patient info they need—using treatment exceptions and the “minimum necessary” rule—while still keeping privacy in check. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPA…
…
continue reading
Imagine leaving your front door wide open in a neighborhood full of burglars, then acting shocked when your TV disappears. That’s basically what’s happening in healthcare cybersecurity. This week, we’re talking about why hackers are running rampant, how small healthcare practices are prime targets (no, you’re not “too small to matter”), and what ba…
…
continue reading
Insider threats are a big risk to healthcare security, whether caused by simple mistakes or intentional misuse of access. Patient data can be exposed in ways many organizations don’t even realize. Learn how HIPAA addresses these risks and the best strategies to keep sensitive information secure. Learn more about Medcurity here: https://medcurity.co…
…
continue reading
AI is here, and with it come big responsibilities. Learn the benefits and risks of this emerging technology and why it’s important for the healthcare industry to stay informed. Technology is powerful, but it’s how we use it that matters the most. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA…
…
continue reading
If you’ve ever wondered what it’s like to scream into the cybersecurity void, this episode might feel oddly relatable. We dive into why “bare minimum” isn’t a security strategy—it’s more like playing Russian roulette with your data. From regulatory head-scratchers to the harsh reality that a “bare minimum” security strategy is about as effective as…
…
continue reading

1
From $10K to $3M: The Price Tag of Neglecting Cybersecurity - Ep 494
40:23
40:23
나중에 재생
나중에 재생
리스트
좋아요
좋아요
40:23If ignoring cybersecurity was a sport, some companies would be gold medalists—until they realize the prize is a hefty fine and years of regulatory headaches. It’s like leaving your car unlocked in a sketchy part of town with a neon sign that says, “Free Stuff Inside.” What could possibly go wrong? Well, in this episode, we break down six real-life …
…
continue reading
What does it take to protect patient data, handle ever-changing regulations, and keep your organization audit-ready? In this episode, we break down the day-to-day reality of healthcare compliance. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA
…
continue reading

1
HHS Releases Strategic Plan for AI in Health Care | Medcurity Live 078
3:15
3:15
나중에 재생
나중에 재생
리스트
좋아요
좋아요
3:15Artificial intelligence is reshaping healthcare, and the new HHS AI Strategic Plan hopes to pave the way for safer, smarter innovation. This framework focuses on fostering trust, promoting equity, and empowering healthcare teams to responsibly integrate AI into their work. Curious about how AI is set to transform patient care and public health? Tun…
…
continue reading

1
Cavity of Lies: Westend Dental’s HIPAA Coverup - Ep 493
41:37
41:37
나중에 재생
나중에 재생
리스트
좋아요
좋아요
41:37Buckle up, folks, because this week’s episode is a wild ride through the Cavity of Lies—where HIPAA violations, ransomware attacks, and outright absurdity collide. What happens when a dental group tries to sweep a massive breach under the rug (or, you know, hide servers in bathrooms)? Let’s just say it doesn’t end well. From a 3-year-long cover-up …
…
continue reading

1
HIPAA Security Changes Are Here: We Saw This Coming - Ep 492
56:43
56:43
나중에 재생
나중에 재생
리스트
좋아요
좋아요
56:43Hold onto your compliance hats—big changes are brewing for HIPAA’s Security Rule! The Notice of Proposed Rulemaking (NPRM) is officially out for public comment, and it’s clear HHA and OCR are on a mission to modernize and tighten the safeguards for electronic protected health information (ePHI). From clarifying risk analysis expectations to making …
…
continue reading

1
New Proposed Updates to the HIPAA Security Rule | Medcurity Live 077
3:59
3:59
나중에 재생
나중에 재생
리스트
좋아요
좋아요
3:59Proposed HIPAA updates could redefine how healthcare handles cybersecurity. From mandatory encryption to multi-factor authentication, these changes aim to tackle modern threats head-on. In this episode, we’re breaking down what’s changing and what it means for compliance in 2025. Learn more about Medcurity here: https://medcurity.com #Healthcare #C…
…
continue reading
Ready to kick off 2025 with a bang? We’re diving into the must-dos for your Q1 2025 compliance and cybersecurity checklist, sprinkling in some risk management wisdom, and why Windows 10 is about as fashionable as shoulder pads in the 2020s. Plus, we sprinkle in a hearty dose of snark to keep you entertained while you get your compliance game strong…
…
continue reading
Ah, supply chain attacks—the gift that keeps on giving... headaches, fines, and catastrophic data breaches. In this episode, we unwrap three cautionary tales of organizations caught in the tangled web of digital supply chain chaos. From unpatched vulnerabilities and sneaky software backdoors to hackers casually buying network access like it’s an eB…
…
continue reading

1
Stay Compliant: Security Never Takes a Holiday | Medcurity Live 076
4:31
4:31
나중에 재생
나중에 재생
리스트
좋아요
좋아요
4:31The new year is here, but cybersecurity threats and compliance challenges never take a holiday. This week, we’re talking about the risks of leaving your systems unprotected during downtime and the steps you can take to ensure everything is up to date and secure. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Comp…
…
continue reading
It’s the final countdown, folks—the last episode of the year! And OCR decided to end 2024 with a bang, handing out settlements like candy at a Christmas parade. But here’s the twist: the candy comes with a price tag, and it’s not cheap. This episode hones in on OCR’s new enforcement initiative targeting incomplete and outdated risk analyses. So, be…
…
continue reading

1
New HIPAA Rule Changes Patient Privacy Protections | Medcurity Live 075
4:18
4:18
나중에 재생
나중에 재생
리스트
좋아요
좋아요
4:18There’s a new HIPAA Rule that went into effect on Monday, and it’s something every healthcare professional needs to know. In this episode, we’re talking about new restrictions on sharing patient data, the introduction of an attestation requirement, and what these changes mean for healthcare organizations. Learn more about Medcurity here: https://me…
…
continue reading
Welcome to the 2024 Blooper Show, where we prove once again that even after nine years, perfection is overrated and laughter is mandatory! Big shoutout to Bojan, our long suffering audio engineer extraordinaire, who turns our chaos into coherence. And of course, we can’t forget you—our amazing listeners—who tune in each week, send us your thoughts …
…
continue reading

1
Finding HIPAA Compliance in Unexpected Places | Medcurity Live 074
3:59
3:59
나중에 재생
나중에 재생
리스트
좋아요
좋아요
3:59HIPAA compliance isn’t always where you expect it. Online forms, patient reviews, and digital apps can all create potential risks for HIPAA incidents. In this episode, we’re uncovering hidden compliance pitfalls and giving you practical tips to safeguard patient data in these overlooked areas. Learn more about Medcurity here: https://medcurity.com …
…
continue reading
Cybersecurity incidents can feel like a punch in the gut, but with the right plan, you can roll with the hits instead of flailing in panic. In this episode, we’re diving into executive strategies for tackling the unexpected, from building response teams to keeping business operations afloat when chaos strikes. Along the way, we also cover a recent …
…
continue reading

1
Access Delayed, Ransom Paid, Cyber Aid Conveyed - Ep 487
54:46
54:46
나중에 재생
나중에 재생
리스트
좋아요
좋아요
54:46Is your healthcare organization ready for a triple threat, or are you playing a risky game of cybersecurity roulette with delayed access, ransomware demands, and a missing incident response plan? Today, we explore three tales in healthcare that are equal parts cautionary and compelling. We kick things off with the Healthcare and Public Health Secto…
…
continue reading

1
Building a Culture of Compliance Through Employee Training | Medcurity Live 073
5:30
5:30
나중에 재생
나중에 재생
리스트
좋아요
좋아요
5:30Your employees are your first line of defense against cybersecurity threats and HIPAA violations. In this episode, we’re talking about practical ways to train your staff, create a compliance-first mindset, and keep patient data secure. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA…
…
continue reading
Feeling thankful this season? Us too—especially when it comes to dodging data disasters! In this episode, Donna and David dive headfirst into some eyebrow-raising cybersecurity tales, from job application breaches exposing sensitive information to the ever-creepy risks of unsecured IoT devices (yes, even your vacuum might be plotting against you). …
…
continue reading
Healthcare organizations are facing increased scrutiny as the government ramps up enforcement of Security Risk Analyses (SRAs). Many are still using inadequate methods, leaving gaps in compliance and exposing themselves to penalties. Completing a detailed, comprehensive SRA is critical—watch the video to learn how to protect your organization and s…
…
continue reading
Doing a half-baked risk analysis is like locking your front door but leaving all the windows wide open. What’s the point? Today, we dive into the first-ever Security Risk Assessment (SRA) violation settlement—a juicy topic for compliance nerds and healthcare pros alike. We’re talking ransomware, compliance checklists (the kind you actually need), a…
…
continue reading

1
Pressure Mounts on The Healthcare Industry to Strengthen Security | Medcurity Live 071
5:30
5:30
나중에 재생
나중에 재생
리스트
좋아요
좋아요
5:30Healthcare organizations face growing pressure to strengthen security measures, as highlighted in the recent HHS and NIST conference. What does this mean for your organization, and what steps should you take now? Get the latest insights and practical tips in the newest Medcurity Podcast. Learn more about Medcurity here: https://medcurity.com #Healt…
…
continue reading
Buckle up for Part 2 of our breakdown on the HHS OCR NIST healthcare security conference - because, yes, 16 hours of deep dives into AI, HIPAA compliance, and cybersecurity priorities can’t be tackled in just one episode! From wild projections about AI’s future in healthcare to OCR’s “tough love” on compliance standards, this episode peels back the…
…
continue reading

1
Why Now’s the Time to Get Your Security Risk Analysis Done | Medcurity Live 070
6:03
6:03
나중에 재생
나중에 재생
리스트
좋아요
좋아요
6:03With the end of the year approaching, now’s the time to take a close look at any potential vulnerabilities within your organization. An annual Security Risk Analysis demonstrates your commitment to data and system protection, while also reassuring customers and meeting compliance standards. Tune in to the latest episode of The Medcurity Podcast to …
…
continue reading
Buckle up, folks! Today, Donna and David are here with Part 1 of their deep dive into the recent HHS OCR NIST healthcare security virtual conference, and they're spilling all the cyber-tea. With experts from HHS, OCR, NIST, FTC, and FDA presenting, this conference covered a ton. From AI-powered hackers and QR code scams to unpatched medical devices…
…
continue reading

1
Securing Vendor Relationships in Healthcare Under HIPAA Compliance | Medcurity Live 069
5:05
5:05
나중에 재생
나중에 재생
리스트
좋아요
좋아요
5:05Securing your vendor relationships is necessary for protecting patient data under HIPAA. Third-party services can introduce vulnerabilities into your system. In this episode, we’ll show you how to close those gaps. Ready to safeguard your network and secure patient trust? Hit play and let’s get started. Learn more about Medcurity here: https://medc…
…
continue reading
Ever heard someone say you need a pen test but then start wondering if they meant a pen from a spy movie? There typically is a lot of confusion between penetration testing and vulnerability assessments—a common mix-up with big consequences for your cybersecurity game. We will walk through different types of pen tests, explain how they help you spot…
…
continue reading

1
Growing Cybersecurity Threats in Healthcare: What to Prepare for in 2025 | Medcurity Live 068
4:36
4:36
나중에 재생
나중에 재생
리스트
좋아요
좋아요
4:36As we wrap up Cybersecurity Awareness Month, we are looking to the future. What lies beyond 2024 and how can you stay ahead? Tune in to learn more! Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA
…
continue reading

1
Phishing, Quishing, Vishing, Smishing and More | Medcurity Live 067
5:08
5:08
나중에 재생
나중에 재생
리스트
좋아요
좋아요
5:08For Cybersecurity Awareness Month, we’re focusing on tactics commonly used by hackers today. Train your staff on phishing, quishing, vishing, and more to stay safe in today’s digital world. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA
…
continue reading

1
Gumming Up the Works: Dental Record Request Nightmare - Ep 481
52:24
52:24
나중에 재생
나중에 재생
리스트
좋아요
좋아요
52:24Ever had a root canal that felt less painful than dealing with bureaucracy? Well, buckle up, because in this episode, we sink our teeth into the 50th patient right of access enforcement action under HIPAA. That’s right—50 cases since 2019, and somehow, this one involving Dr. Gumb (yes, really) and a dental records dispute is the most absurd of the …
…
continue reading
Today we tackle the trifecta of cybersecurity headaches: Microsoft’s awkwardly ambitious recall feature, the looming HISAA regulations (because HIPAA wasn’t enough), and a juicy enforcement action following a ransomware attack. We’ll break down how Microsoft’s recall reboot went from intrusive default to opt-in relief, why HISAA could mean mandator…
…
continue reading

1
Is Your Organization’s Biggest Threat Already On The Inside? | Medcurity Live 066
4:09
4:09
나중에 재생
나중에 재생
리스트
좋아요
좋아요
4:09Your organization’s biggest risk may come from within. In this episode, we discuss how insider breaches—whether malicious or accidental—can be just as devastating as external attacks, because insiders already have access to critical systems. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA…
…
continue reading
Leaving your web browser open with 25 tabs is the digital version of leaving your front door unlocked? Whether it's for email, work docs, shopping, or watching cat videos, your browser is the gateway to, well, everything. But as much as we depend on them, so do hackers. From credential theft to sneaky phishing attacks, cybercriminals are finding cl…
…
continue reading

1
Trust Nothing, Secure Everything with the Zero Trust Method | Medcurity Live 065
4:36
4:36
나중에 재생
나중에 재생
리스트
좋아요
좋아요
4:36What is Zero Trust in cybersecurity? For this Cybersecurity Awareness Month, we’ll be going over several key elements of a good cybersecurity strategy, and today’s topic covers the Zero Trust method. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA
…
continue reading
Boo! 🎃 Halloween may not be here yet, but we’re kicking off the spooky vibes early! Donna and David dive into the eerie world of cybersecurity, where the tricks are plentiful, and the treats are hard to find. From scary ransomware attacks to the horrifying reality of business email compromises, the internet is scarier than a haunted house with no e…
…
continue reading

1
Your Incident Response Plan: A Playbook for Emergencies | Medcurity Live 064
5:27
5:27
나중에 재생
나중에 재생
리스트
좋아요
좋아요
5:27In this episode of The Medcurity Podcast, we’re talking about building an Incident Response Plan, why it matters, and how often you should review it to stay ahead of threats. Plus, we share practical tips to make sure your plan is ready when you need it most. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Complia…
…
continue reading
Healthcare marketing is tricky enough without tripping over the big pitfalls that could leave you tangled up in HIPAA violations or a patient privacy disaster. Today we break down five common marketing mistakes you definitely want to steer clear of. From misinterpreting HIPAA rules to guarding patient data like it’s your grandma’s secret cookie rec…
…
continue reading

1
One of the Easiest Mistakes to Avoid - Improper Disposal of PHI | Medcurity Live 063
4:59
4:59
나중에 재생
나중에 재생
리스트
좋아요
좋아요
4:59How should Protected Health Information (PHI) be disposed of? In order to avoid stolen data and/or HIPAA violations, learn how to properly dispose of PHI, follow regulations, and keep your staff updated on effective disposal methods. Learn more about Medcurity here: https://medcurity.com #Healthcare #Cybersecurity #Compliance #HIPAA…
…
continue reading