Governance, Risk and Compliance

Here’s how employers can adhere to data privacy guidelines and regulations while monitoring employees.

AI Terrors, Infragard, Microsoft, HIPAA, GitHub, NIST, and more on the Security Weekly News!

The second OCR enforcement action announced this week stems from its HIPAA Right of Access standard, a key regulatory focus for HHS.

In a new settlement with a New Vision Dental over a possible HIPAA failure, OCR warns healthcare providers that impermissible disclosure of health information on social media violates HIPAA.

More companies now recognize that with work-from-home, the perimeter has extended out and they must secure the edge.

AHA, CHIME, and AEHIS respond to Sen. Mark Warner’s policy ideas for healthcare cybersecurity and possible federal resources for sector challenges, centered around cyber insurance and incentives.

The U.S. Office of Management and Budget has been urged by the Information Technology Industry Council a trade group that includes Microsoft, Amazon, Intel, and Palo Alto Networks as members to discourage software bill of materials requirements from federal agencies amid the lacking maturity of SBOMs, reports SecurityWeek.

The move by telecommunications company Vonage to add Salesforce encryption aims to bolster security and improve compliance.