Governance, Risk and Compliance

The Cybersecurity Solarium Commission emphasized that the U.S. could only have lasting cyber resilience should attention, investments, and agility to adapt to evolving threats continue, reports The Record, a news site by cybersecurity firm Recorded Future.

NIH says it relies on grantees to protect health information, intellectual property, but OIG says data could be at risk without program controls.

Medtronic MiniMed insulin pumps are vulnerable to a highly specific attack scenario that would interfere with the flow of insulin.

The Sequoia Project issued five resources aimed to support providers in complying with the upcoming interoperability rules while sharing the provider burden of overlapping privacy rules.

For best results, security teams should take an empathetic approach to insider security risk.

Three providers reached agreements with HHS's Office of Civil Rights over potential violations of the HIPAA Privacy Rules right of access standards.

Here’s a checklist of things a security team must do to meet myriad compliance mandates specific to cloud security.