These days, Healthcare is one of the fastest growing verticals for information security. And for good reason—two out of three stolen records are healthcare records, which often include extremely sensitive information such as names, addresses, dates of birth, Social Security numbers, health and employment histories, and more. It seems the question has become not if a healthcare provider will be attacked, but when.
And with this increased focus on healthcare, many InfoSec pros now must familiarize themselves with HIPAA, AKA the Health Insurance Portability and Accountability Act, an immensely complex privacy legislation passed by Congress in 1996.
In this 45-minute presentation from BSides Tampa 2017, CISSP Michael Brown will explain what HIPAA is, HIPAA risk assessment, and how InfoSec pros should approach the extensive healthcare regulation.
Brown has been involved in IT for over 20 years, more than half in information security. Moving from a security admin to a global security architect, he has been working for the last few of years as an IT security consultant working with clients to implement an information security management system as well as performing security risk assessments, gap analysis, and developing policies and procedures. His research interests include IT/Security frameworks and compliance, the Internet of Things, and mobile device security.
Jeff Edwards
Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.
- Five Questions You Need To Ask Yourself When Evaluating SIEM Solutions - November 8, 2017
- Winning the Data Breach War with User and Entity Behavioral Analytics - November 3, 2017
- 5 Alternatives to The Gartner Magic Quadrant for SIEM - October 31, 2017
