What is an SRA in healthcare? A Security Risk Assessment (SRA) in healthcare is a mandatory HIPAA evaluation of risks to electronic Protected Health Information (ePHI). It identifies where ePHI is stored and transmitted, assesses threats and vulnerabilities, evaluates existing safeguards, assigns risk levels, and produces a prioritized remediation plan. The HIPAA Security Rule requires … Read more
Automotive dealerships across the U.S. are navigating a wave of evolving data privacy and cybersecurity regulations. From the revised FTC Safeguards Rule to a growing patchwork of state-specific privacy laws, compliance expectations are not only more stringent—they’re more complex. For many dealership leaders, keeping up with these shifts while managing day-to-day operations is becoming increasingly … Read more
If you’re a mid-sized business, here’s a hard truth: you are squarely in the crosshairs of cyber attackers. For years, many assumed hackers only cared about big enterprises with deep pockets. But the data tells a different story. According to IBM’s 2024 Cost of a Data Breach Report, mid-sized companies now face average breach costs … Read more
Mergers and acquisitions (M&A) can feel like tightrope walks for mid-market and enterprise companies. There’s the thrill of growth and new opportunities, but also a lurking risk that can topple even the best deals: compliance. When two organizations become one, aligning their technology and processes isn’t just an IT chore–it’s a compliance minefield. Overlooking how … Read more
Why does HIPAA compliance look different for behavioral health practices? Behavioral health records carry a layer of sensitivity general medical records don’t: therapy notes, diagnoses, and substance use history that patients often consider more private than a broken bone or a blood test. HIPAA still applies, but the standard for protecting it is higher in … Read more
Your last security risk assessment told you the truth about your network as it existed on the day someone ran it. Every day since, that report has gotten a little less accurate, and nobody sends a notification when it finally stops being useful. Annual security risk assessments for senior living means repeating a formal security … Read more
This post recaps key insights from our February webinar, where Adam Pendleton, Chief Information Security Officer at Meriplex, and Jason Barnhizer, Director of Threat Operations at Blackpoint Cyber, broke down the new cybersecurity reality every business needs to prepare for. There’s no more buffer time. No more early warning signs. No more leisurely windows between … Read more
An auditor doesn’t walk in and ask if you care about resident privacy. They ask for the access log from March, and then they check whether it matches what your policy says should be happening. That gap, between what’s written down and what’s actually running, is where most communities lose points, not because they’re careless, … Read more
If you’re a mid-sized business, here’s a hard truth: you are squarely in the crosshairs. For years, there has been a lingering belief that cybercriminals only go after big-name enterprises with sprawling infrastructures and deep pockets. But the data tells a different story. According to IBM’s 2024 Cost of a Data Breach Report, mid-sized companies … Read more
Today’s threats don’t just crash systems. They derail operations, stall revenue, and shake customer trust. According to IBM’s 2024 Cost of a Data Breach Report, the average breach for a small or mid-sized business costs $3.5 million. And that’s just the financial impact. The reputational damage is harder to measure, but even more difficult to … Read more
