The Ostendio blog covered a lot of ground this year – from a 3-part series about Cybercrime in Healthcare – to the worst passwords your organization can use. As you review and prepare your risk and compliance strategies for the coming year, check out some of our client's most read blog posts from 2016.
Demonstrating HIPAA compliance is a challenge for many digital heath companies. In fact, smaller digital health companies often struggle to meet even the basic requirements of the HIPAA Privacy, Security and Breach notification rules. Fortunately, Amazon Web Services and MS Azure, both of which offer Business Associate Agreements, provide the ability to physically protect production data in a simple manner. And with services like Catalyze, even the smallest startup can now provide a minimally acceptable physical security requirement.
Continue reading this blog post here.
A growing number of digital health companies are being asked to adopt the HITRUST standard. You too may soon get asked. HITRUST is now the compliance standard for many large healthcare organizations like Anthem, Health Care Services Corp., Highmark, Humana, and UnitedHealth Group.
For the average digital health company HITRUST certification can be a daunting task. Most organizations are required to manage their information security and compliance to multiple standards and regulations, not just HITRUST. So how do you build HITRUST certification into the mix of other information security standards and regulations you are already working to meet?
Finish this blog post here.
[Learn more: For more information about HITRUST download our free whitepaper]
The digital health market was rocked by the recent announcement that HR services darling Zenefits has gone from ‘rock star’ to a symbol of Silicon Valley excess in a matter of weeks. The company, which has risen from a startup to being valued at $4.5 billion inside of two years, is clearly trying to get ahead of the issue. Zenefits cofounder and CEO stepped down amid “compliance concerns.”
The reality is that Zenefits story is indicative of many digital health success stories. It should not be a surprise.
Find the rest of this post here.
Ostendio helps healthcare companies and medical device manufacturers improve security, reduce risk and demonstrate compliance through its cloud-based security platform, MyVCM. Email us at info@ostendio.com to request a demo or to speak with an industry expert.