<\/p>\n
These days, Healthcare is one of the fastest growing verticals for information security. And for good reason\u2014two out of three stolen records are healthcare records, which often include extremely sensitive information such as\u00a0names, addresses, dates of birth, Social Security numbers, health and employment histories, and more. It seems the question has become not if a healthcare provider will be attacked, but when.<\/p>\n
And with this increased focus on healthcare, many InfoSec pros now must familiarize themselves with HIPAA, AKA the Health Insurance Portability and Accountability Act, an immensely\u00a0complex privacy legislation passed by Congress in 1996.<\/p>\n
In this 45-minute presentation from BSides Tampa 2017, \u00a0CISSP Michael Brown will explain what HIPAA is, HIPAA risk assessment, and how InfoSec pros should approach the extensive healthcare regulation.<\/p>\n
Brown has been involved in IT for over 20 years, more than half in information security. Moving from a security admin to a global security architect, he has been working for the last few of years as an IT security consultant working with clients to implement an information security management system as well as performing security risk assessments, gap analysis, and developing policies and procedures. His research interests include IT\/Security frameworks and compliance, the Internet of Things, and mobile device security.<\/p>\n