What is NIST 800-66, and How Does it Apply to HIPAA?

Sep 22, 2021 Lazarus Alliance 0 Comment

Cybersecurity is a community practice. Different innovations and discussions about new vulnerabilities, threats and controls inevitably influence security implementations in multiple markets and industries, depending on their applicability. This is just as true for healthcare, an industry generally governed by HIPAA. HIPAA, however, is complex, and organizations working in healthcare often look outside their own industry to help them better understand cybersecurity outside just hitting compliance checklists. That’s where NIST 800-66 comes in.

In this article, we’ll discuss HIPAA security and how it relates to NIST 800-66. This NIST document helps healthcare providers under HIPAA understand more advanced security controls that could support their compliance, privacy and cybersecurity controls.

Ransomware and HIPAA Compliance in 2021

Jul 10, 2021 Lazarus Alliance 0 Comment

July 5th saw a major attack on Managed Service Providers (MSPs), including Kaseya services. MSPs like Kesaya often offer their cloud-based services to several clients in multiple sectors, and Kesaya is no exception. In fact, Kesaya offers specific managed IT resources for healthcare clients, although no information has been released about any affected organizations.

The combination of increased reliance on MSPs and the sensitive nature of healthcare providers make ransomware attacks a real threat, one that your dedicated IT team must consider as part of your cybersecurity and compliance strategy.

What is a Business Associate Agreement and Why is it Important for HIPAA?

Jan 27, 2021 Lazarus Alliance 0 Comment

Software and cloud providers are becoming a major part of healthcare infrastructure. As demands for data storage, analytics, collaboration, and telehealth treatment increase, healthcare providers are relying on MSPs and CSPs to help them stay up-to-date and compliant while respecting the privacy of their patients.

If you’re a vendor who wants to work in the healthcare industry as a Business Associate, it’s not enough for your partners to stay compliant. Under HIPAA rules, you must have an agreement in place with any healthcare provider you partner with that places you under HIPAA regulations as well.