Government info security news, training, education - GovInfoSecurity
GovInfoSecurity.com covers the latest news, laws, regulations and directives related to government information security, focusing on the White House's cybersecurity initiatives, the latest legislative efforts in Congress, as well as thought leadership from top government CISOs.
Government Information Security Training Webinars
Chinmay Gaikwad - Harness, Sean Roth - Harness • November 14, 2024 @ 11:30 AM (EST) •. Upcoming regulatory changes and evolving supply chain threats require a proactive approach to Cyber Supply Chain Risk Management (C-SCRM). Join our webinar to learn how CIS benchmarks and best practices can enhance your supply chain security posture.
Report Dissects Conti Ransomware Attack on Ireland's HSE
Dec 10, 2021 · The 157-page PricewaterhouseCoopers report, which was commissioned by the HSE and released on Dec. 3, says that the May attack took advantage of a number of vulnerabilities that are not unique to Ireland's national health system, including issues faced by other organizations. Those issues included HSE having "a very low level of cybersecurity ...
NIST's 7-Step Contingency Planning Process - GovInfoSecurity
Jun 8, 2010 · NIST on Monday issued revised guidance that defines a seven-step contingency planning process that federal agencies and other organizations in fields such as healthcare and banking can use to develop and maintain a viable interim recovery program for their information systems.. The National Institute of Standards and Technology designed the seven progressive steps to be integrated into each ...
HHS Warns of Threats to Electronic Health Records - GovInfoSecurity
Feb 18, 2022 · Healthcare entities should implement a more "proactive preparedness" approach for protecting their electronic health record/electronic medical record systems, which are an increasingly attractive target for cyberattacks and other breaches, federal regulators warn.. See Also: 2024 Threat Hunting Report: Insights to Outsmart Modern Adversaries The Department of Health and Human Services' Health ...
US Army Apparently Rescinds IoT Device Ban - GovInfoSecurity
Jun 2, 2021 · The U.S. Army believes IoT devices, such as Amazon's Echo, pose a potential security risk for those working remotely. The U.S. Army has deleted from its website a directive requiring all remote workers to remove or turn off IoT devices, according to the security firm Bitdefender.. See Also: OnDemand | Building a Secure IoT Deployment Using 5G Wireless WAN
Hack of Medical Imaging Provider Affects Data of 2 Million
Jun 7, 2022 · Hack of Medical Imaging Provider Affects Data of 2 Million. A hacking incident involving data theft from a prominent provider of medical imaging services in Massachusetts has affected 2 million individuals, making it the largest health data breach reported to federal regulators so far this year. See Also: The Healthcare CISO’s Guide to ...
Cyberattack Affects Greenland's Healthcare Services
May 23, 2022 · Greenland's healthcare services have been "severely limited" due to a cyberattack that has lasted for at least two weeks to date, says the Naalakkersuisut, the country's government. See Also: Gartner Guide for Digital Forensics and Incident Response. All IT systems and servers associated with the healthcare services of the country were forced ...
Healthcare Workers Allege Amazon Alexa Violates Privacy
Jul 7, 2021 · A lawsuit alleges Amazon Alexa device recordings violate privacy and wiretapping laws. Amazon's Alexa virtual assistant device and applications are unlawfully recording and storing highly sensitive and private conversations, including discussions of patient information, that were not meant to be recorded, four healthcare …
Medical Workers Plead Guilty to PHI Access-Related Crimes
Dec 6, 2021 · Two former healthcare workers - a medical biller in Florida and an emergency medical technician in New York - have pleaded guilty in two separate federal cases involving the criminal misuse of patient information accessed while performing their jobs. One case involved healthcare fraud and identity theft, and the other criminal HIPAA violations.