Daniel Ayala

Nothing beats meeting colleagues, customers, suppliers and partners in person at the Health-ISAC Spring Summit. It has been great to catch up with friends in healthcare and cybersecurity. Below is a free disaster recovery plan template for healthcare companies. Healthcare organizations handle sensitive data every day, making their IT systems critical fortresses that must withstand disruptive events. The recent article, "Disaster Recovery in Healthcare: Free Plan Template and Overview," highlights a crucial reality: being unprepared is not an option. The article offers a valuable resource: a free disaster recovery plan template specifically designed for healthcare institutions. This tool can significantly reduce risks and ensure continuity of care, even during chaotic times. I fully support the article's message. With my experience across the US Military, Government, and Private Sector, I've seen firsthand the importance of preparedness, especially in healthcare. This article not only emphasizes the need for a disaster recovery plan but also provides a practical starting point for organizations that may be starting from scratch. For healthcare providers, protecting patient data is as important as patient health. The consequences of neglecting these responsibilities are too serious to overlook. Let this be your motivation to ensure your disaster recovery strategies are as resilient as the care you provide. https://lnkd.in/emfqtCPC

15

1 Comment

Pennsylvania’s Consumer Data Privacy Act is Now Law! As of March 18, 2024, Pennsylvania has officially passed the Consumer Data Privacy Act (House Bill No. 1201, Session of 2023). This landmark legislation enhances consumers' data privacy rights and sets forth clear obligations for data controllers and processors. Key Highlights Consumer Rights: Consumers now have enhanced rights, including the ability to access, correct, and delete their personal data. They can also opt out of data processing for targeted advertising or sales. Business Responsibilities: Data controllers must limit data collection, obtain consent for processing sensitive data, and implement robust data protection measures. Enforcement and Penalties: Strict penalties are in place for non-compliance, emphasizing the importance of businesses aligning with these new standards Is your business fully compliant with these regulations? Privacy24 is here to help! Our seasoned compliance experts specialize in helping businesses navigate complex data privacy laws. Our expert team can ensure that your company not only complies with this new law but also leverages compliance as a competitive advantage. Our Services Include: Comprehensive compliance audits. Tailored policy development and strategic implementation. Training and ongoing support to maintain high compliance standards. Don’t risk penalties or damage to your reputation. Contact us today for a consultation and let Privacy24 help you achieve and maintain compliance with confidence. 🌐 For more information, visit privacy24.io or send us a direct message here on LinkedIn! #DataPrivacy #ConsumerProtection #PennsylvaniaLaw #ComplianceExperts #Privacy24

6

The 5th annual Data Protection Trends report from Veeam summarizing data protection strategies of up to 13,300 organizations over 2020‑2026. Download the report to learn how business and IT leaders addressed these issues from shared insights: https://lnkd.in/gK_JiS8u #Veeam #DataProtection #Report

11

Today’s complex data environment requires greater granularity and multiple factors in access control decisions – beyond just identity.  Improve your security and risk posture with zero trust architecture. #GartnerSEC #Cybersecurity #ZeroTrust 

9

The retirement of #PCIDSS v3.2.1 is now official, so your organization needs to be advancing in its transition to v4.0. This episode of Compliance Pointers will help you determine if you’re on the right path. https://hubs.ly/Q02wQbR50 #PCI

11

SEC Charges R.R. Donnelley & Sons Co. $2.1 Million Fine for Cybersecurity-Related Controls Violations On June 18th, 2024, the U.S. Securities and Exchange Commission announced that RR Donnelley, a global provider of business communication and marketing services, agreed to pay over $2.1 million to settle disclosure and internal control failure charges relating to cybersecurity incidents and alerts in late 2021. This SEC settlement with RRD highlights critical issues around cybersecurity and internal controls. Key findings include inadequate controls over material non-public information (MNPI), heightened insider trading risks, and violations of the Securities Exchange Act of 1934. Key Allegations: - Inadequate controls to prevent MNPI misuse - Insider trading risks due to poor monitoring - Regulatory violations and insufficient disclosure controls Inadequate Cybersecurity Response: - Between Nov 29 and Dec 23, 2021, RRD's internal intrusion system issued numerous alerts. - Alerts were reviewed by a third-party MSSP and escalated to internal cybersecurity personnel. - Despite escalations, RRD failed to take timely action, leading to unauthorized data exfiltration of 70 GB, including personal and financial information of 29 clients. - Issues identified included lack of prioritization, workflow for alerts, and inadequate auditing of the MSSP's performance. - Only after an external company alerted the CISO did the firm respond effectively. How AdvisorDefense Can Assist Registered Investment Advisors (RIAs): We offer a comprehensive suite of services tailored to help RIAs meet SEC regulations and bolster their cybersecurity defenses. Our mission is to empower RIAs with the necessary tools and expertise to navigate the cybersecurity landscape, ensuring compliance with regulatory requirements and protecting client information. By partnering with AdvisorDefense, RIAs can enhance their cybersecurity posture, ensure compliance, and protect their clients from evolving cyber threats. Protect your clients. Maintain your reputation. Ensure compliance. Contact us to learn more about how we can support your firm. https://lnkd.in/eVKtr3_x #Cybersecurity #SEC #Compliance #RIAs #AdvisorDefense #CyberRiskManagement #FinancialServices #RegulatoryCompliance #CyberThreats #CyberSecurityAwareness #CyberSecuritySolutions

10

Your organization’s cyber defense is important. But your #CyberResilience is even more critical. Find out why in this look back at #RSAC 2024 with CDW EVP, Global Security Strategy Office, Buck Bell. It’s a must-see! #Security #DisasterRecovery https://dy.si/quRT6

15

Tom Conkle and Kelly Hood partner for this #RSAC Webcast highlighting the expansion of the NIST Cybersecurity Framework (CSF), Version 2.0. Attend on June 18 to learn about the CSF updates and ensure your organization is prepared for the future! Register ➡️

8

NCCoE Director Cherilyn Pascoe sits down with Frank Cilluffo at the McCrary Institute to talk about the new 2.0 edition of the NIST Cybersecurity Framework and its value for helping #cybersecurity professionals face current challenges. The Cybersecurity Framework is used by organizations around the world to assess cybersecurity risks, prioritize actions, and improve the enterprise’s cybersecurity posture. Watch full video: https://lnkd.in/ex3FYJry #infosec #leadership

19

This is an interesting perspective. The CISO role going away and finding back into the CIO role. Or will it? Let’s keep this “prediction” in mind and see how the trend goes.

5

2 Comments

Hope you can join us for a robust discussion on an important topic!

9

The Department of Health and Human Services (HHS) has reversed its previous stance, now allowing Change Healthcare to file breach notifications on behalf of entities affected by the February ransomware attack. Initially, HHS required each impacted organization to individually report breaches, causing frustration among the thousands of affected healthcare providers. #CyberSecurity #DataBreach #HIPAANotifications #HealthcareCybersecurity #RansomwareAttack #ChangeHealthcare #HHSGuidance #MedicalClaimsSecurity #BreachNotificationPolicy #HealthcareProviders

43