show episodes
 
CyberSecurity Sense is LBMC Information Security's podcast that provides insight and updates on such information security topics as: IPS Monitoring and Managed IDS Services, Security Information Event Management, Digital Forensic Analysis, Electronic Discovery and Litigation Support, Computer Security Incident Response, Penetration Testing, Risk Assessments, Security Program Planning, Web Application Security Assessments, ACAB LADMF Certification Assessments, CMS Information Security, FedRAM ...
  continue reading
 
The CyberPHIx is a regular audio podcast series that reports and presents expert viewpoints on data security strategy for organizations handling patient health or personal information in the delivery of health-related services. These timely programs cover trends and data security management issues such as cybersecurity risk management, HIPAA and OCR compliance strategy and vendor risk management. Meditology Services, the healthcare industry's leading security and compliance firm, moderates t ...
  continue reading
 
Cybersecurity and data privacy is a requirement for any good business. So how can a CISO, CTO or compliance manager stay on top of where the industry is heading? Infosec veteran and former lead auditor, Blaise Wabo discusses the intersection of security, privacy and compliance. Topics include: Guest interviews with industry experts, framework updates, the business implications of compliance (and non-compliance), and discussions about compliance challenges, tips and tricks.
  continue reading
 
Loading …
show series
 
Tune in to the August edition of our PCI Monthly Update. We kick off with a sneak peek into the upcoming PCI North America Community Meeting in Portland and introduce the newly launched PCI Community Job Board—a dedicated platform for security talent and job postings in the payment industry. Next, we delve into Requirement 5, shedding light on anti…
  continue reading
 
In this episode of the Compliance Crosswalk podcast, your host Blaise Wabo is joined by Jacques Antikadjian, the co-founder and chief security officer at Xano. Join them as they discuss connecting the dots between compliance and security. They emphasize the importance of integrating security and compliance measures to effectively manage risk. They …
  continue reading
 
Dive into the latest PCI news in our July PCI Update. This episode covers key PCI developments, an in-depth exploration of Requirement 4, and a helpful QSA Q&A. We kick off this episode by previewing the upcoming PCI Community Meeting in Portland and discuss our hosts' presentation on "Generative AI: Your New Secret Weapon or an Insider Threat?" We…
  continue reading
 
Join us for this episode of The CyberPHIx podcast, where we hear from Morgan Hague. Morgan is the manager of IT Risk Management at Meditology Services and has been in the industry for nearly a decade. He has worked with hundreds of organizations in an advisory capacity helping to assess or audit security functions to drive program maturity. He also…
  continue reading
 
In this episode of the Compliance Crosswalk podcast, your host Blaise Wabo is joined by his good friend and compliance expert, Patrick Sullivan, to dive deep into the A-LIGN's 2023 Compliance Benchmark Survey. Join Blaise and Patrick as they share key insights and discuss the implications of the survey results on compliance strategies in today's ev…
  continue reading
 
On this episode of the Compliance Crosswalk Podcast, Blaise Wabo engages in an enlightening conversation with former COO of Tulane Medical Center, Andre Duplessis. This episode zeroes in on the harrowing experience faced by Tulane Medical Center during Hurricane Katrina in 2005. Duplessis reflects upon the importance of business continuity planning…
  continue reading
 
Do you know the average payout organizations are hit with for every attack? William Parks and Bill Dean discuss a service dedicated to helping your organization (big or small) withstand a ransomware attack. Bill and his team are ready to help you and your organization obtain peace of mind when it comes to these advanced threats. Questions for Bill?…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Britton Burton highlights the following topics trending in healthcare cybersecurity this month: The Changes to HHS 405(d) HICP publication on the to…
  continue reading
 
After repeatedly falling victim to identity thieves through SIM swap attacks, a telecom engineer and entrepreneur, Haseeb Awan, decided to start his own carrier with security as its top priority. Today, Haseeb is the founder and CEO of EFANI Secure Mobile, a private cell phone service provider catering to individuals and organizations that need ext…
  continue reading
 
LBMC Shareholder Bill Dean and William Parks spend today’s episode discussing Advance Guard, a new service offering from LBMC's Security Technical Team. Learn how Advance Guard may help protect your organization's most valuable assets, save time on compliance audits, and give peace of mind about your current security stance. Want to see Bill’s “Pre…
  continue reading
 
Join us for this episode of The CyberPHIx podcast where we hear from Ryan Patrick, Vice President of Adoption at HITRUST. Ryan works with clients to understand and implement the HITRUST-validated assessments that best suit their organization’s risk profile. Prior to this role, he spent many years as a security practitioner and IT lead in a wide ran…
  continue reading
 
With a new digital landscape brought on by the pandemic, a war in Ukraine, increasingly sophisticated threat actors, artificial intelligence, and now a potential recession, the nature of how organizations are breached has fundamentally changed. No company is too small to be attacked; making a single breach can be enough to put one out of business. …
  continue reading
 
Stay up to date with the latest in PCI compliance. In this episode, William Parks, Andy Kerr, and Kyle Hinterberg discuss the latest in PCI news, new restrictions around PAN data, and how to master Requirement 3 while preparing for PCI 4.0. Don't miss our upcoming webinar: "How to Reduce Your PCI Scope: Tips & Technology Your Organization Needs to …
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. Our host Britton Burton spends this entire episode reviewing and analyzing the recently released National Cybersecurity Strategy, including: Summarizing, and in some cases qu…
  continue reading
 
ChatGPT is making headlines worldwide and its impact is making a lot of business owners uncomfortable. What is ChatGPT? How will this tool change how you do business? Is ChatGPT a security risk? What to expect from ChatGPT4? William Parks interviews LBMC's Data Insights team members to discuss this controversial topic, dive into facts your organiza…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Britton Burton highlights the following topics trending in healthcare cybersecurity this month: The Federal Trade Commission’s (FTC) first Health Br…
  continue reading
 
In the final installment of this five-part series, Blaise Wabo welcomes A-LIGN's Federal Practice Lead, Tony Bai, and HITRUST Associate Director, Shreesh Bhattarai, for a deep dive into the intricacies of HITRUST, HIPAA, & Federal certifications. Together they discuss updates to the NIST 800-171 and how that affects the various government certifica…
  continue reading
 
William Parks takes this podcast to introduce a key member of LBMC Information Security’s Technical Services team, Daniel Nguyen. Daniel is a manager on the team with quite the insightful background. William and Daniel spend time discussing current steps to keep your organization successful in their journey to a healthier security posture. Question…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Britton Burton highlights the following topics trending in healthcare cybersecurity this month: A new National Cybersecurity Strategy coming from th…
  continue reading
 
In the latest installment of this five-part series, Blaise Wabo welcomes A-LIGN's PCI Lead, Dustin Rich, and Technical Knowledge Leader and Research and Development Director, Joe Cortese, for a deep dive into the intricacies of PCI, Penetration tests, and Vulnerability Scans. Together they discuss new updates related to the new PCI 4.0 and the late…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Britton Burton highlights the following topics trending in healthcare cybersecurity this month: New FDA authority granted by December’s omnibus bill…
  continue reading
 
Stay up to date with the latest in PCI compliance. In this episode, William Parks, Andy Kerr, and Kyle Hinterberg discuss the latest in PCI news and how to master Requirement 1 while preparing for PCI 4.0. For any questions, feel free to reach out to us here: Kyle Hinterberg: kyle.hinterberg@lbmc.com Andy Kerr: andy.kerr@lbmc.com William Parks: wil…
  continue reading
 
In the latest installment of this four-part series, Blaise Wabo welcomes A-LIGN's SOC 2 lead, Shayna Davitt, and ISO 27001 lead, Adam Lubbert, for a deep dive into SOC and ISO assessments. They discuss common pitfalls companies face when pursuing both audits and how to avoid them, recent updates in the ISO 27001 standards, and the advantages of doi…
  continue reading
 
The CyberPHIx is your source for keeping up with the latest cybersecurity news, trends and industry leading practices, specifically for the healthcare industry. In this episode, our host Britton Burton highlights some bold, and some not so bold, predictions for healthcare cybersecurity in 2023. Topics covered include: Continued escalation and evolu…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry leading practices, specifically for the healthcare industry. In this episode, our host Britton Burton highlights the following topics trending in healthcare cybersecurity this week: OCR releases more detail on their Recognized Security…
  continue reading
 
William Parks, Andy Kerr, and Kyle Hinterberg discuss the latest PCI news, share how to create and what should be covered in an executive summary for a PCI assessment, and answer a few questions from our listeners. If you’d like us to answer and address questions on our next episode, reach out to us here: Andy Kerr – andy.kerr@lbmc.com Kyle Hinterb…
  continue reading
 
Change is on the horizon for The CyberPHIx! Join us as your new host, Britton Burton, interviews your favorite host, Brian Selfridge to discuss it. This episode is a little different flavor than normal as your beloved host takes some time to explain what’s next for him and to reflect on some really interesting experiences he’s enjoyed in his cybers…
  continue reading
 
Knowing which compliance assessment will best benefit your organization is just the start. Understanding the intricacies of compliance as a whole is critical in ensuring your find the right partners and people to successfully achieve compliance and leverage them to strengthen your security posture effectively. In this new episode, Blaise Wabo joins…
  continue reading
 
Healthcare cybersecurity has seen major game-changing risk management models and companies emerge in the last several decades. These include the introduction of the HITRUST Common Security Framework (CSF) and certification model and the emergence of companies like Meditology Services and CORL Technologies that are dedicated to solving big, complex …
  continue reading
 
In this podcast, Host William Parks discusses with LBMC Information Security Senior Managers Andy Kerr and Kyle Hinterberg some of the top takeaways at this year’s PCI SSC Community Meeting. Topics discussed during this episode include changes to the “In-Place with Remediation” reporting option which was added in PCI DSS v4.0, what to do if you mis…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry leading practices, specifically for the healthcare industry. In this episode, our host Brian Selfridge highlights the following topics trending in healthcare cybersecurity this week: Deep dive into new CISA Cybersecurity Performance Go…
  continue reading
 
The world of compliance is one of numerous assessments and certifications, each varying in scope and effort depending on the industry they serve and the level of security. Figuring out which one is right for your organization can effectively and efficiently bolster your security posture, improving your competitive edge and offering to your clients.…
  continue reading
 
The last few years third-party vendor risk management (TPRM) has transitioned from being a relatively minor part of security and compliance programs for healthcare entities into a massive undertaking with potentially dire consequences if not managed properly. This is one of those topics that seems to really have CISOs shaking in their boots. What m…
  continue reading
 
The Internet provides access to lots of good data, useful websites, social media options, and entertainment, but unfortunately, it also poses some risks to the security and privacy of individuals. In this episode, William Parks and Mark Burnette will share some practical tips for how you can keep yourself and your family safe and secure online. You…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Brian Selfridge highlights the following topics trending in healthcare cybersecurity this week: New Ponemon study that links increased mortality rat…
  continue reading
 
ESG is a topic we’re hearing come up more and more lately, especially as it relates to investors. If you’re unfamiliar, ESG stands for Environmental, Social and Governance. At its core, ESG is helping companies and investors understand how ESG non-financial factors impact a company and how a company impacts those factors as well. In this episode of…
  continue reading
 
Engaging IT and other technical stakeholders to support cybersecurity initiatives can be a daunting task for security professionals. We are often the bearers of bad news or can be perceived as adding to the workloads of already overburdened IT teams. In short, it can be hard to make friends. Join us for this episode of the CyberPHIx podcast where w…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Brian Selfridge highlights the following topics trending in healthcare cybersecurity this week: Historic breach levels reached for healthcare betwee…
  continue reading
 
From advances in technology creating the "new perimeter" as a result of remote work, to the shifting perspectives on the importance of privacy, the landscape for security compliance has changed dramatically within the last five years. These changes leave startups in the early stages of product development uniquely positioned to leverage compliance …
  continue reading
 
Breaches continue to balloon for healthcare applications as the industry continues to drive innovations in virtual care, personalized medicine, and digital healthcare. Organizations that deploy robust application development security programs create the opportunity to identify and correct security weaknesses before products hit the market. Software…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Brian Selfridge highlights the following topics trending in healthcare cybersecurity this week: IBM’s and Ponemon’s annual Cost of a Data Breach Rep…
  continue reading
 
It’s no secret that businesses across all industries and sizes are feeling the effects of the Great Resignation. So, what can organizations do to find and retain quality cybersecurity talent in these trying times? In this episode of Compliance Crosswalk, hosts Arti Lalwani and Blaise Wabo are joined by Andrew Houshian, Vice President of Service Del…
  continue reading
 
Healthcare organizations are ramping up the adoption of enterprise security certifications to provide assurance of their security program and control effectiveness to their customers and partners. Some of the most common security certifications and attestations in healthcare include HITRUST and SOC 2 Type II. Join us for our 100TH EPISODE of The Cy…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Brian Selfridge highlights the following topics trending in healthcare cybersecurity this week: Bombshell report of hospitals sharing PHI with Faceb…
  continue reading
 
Join us for this episode of The CyberPHIx podcast where we hear from Bart Layton, VP of Product for CORL Technologies, who was also a leader on the team that overhauled and secured healthcare.gov. In this two-part conversation, we discuss Bart’s insights into the deployment and security of healthcare.gov as well as his perspectives on third- and fo…
  continue reading
 
Earlier this month, cybersecurity and compliance firm A-LIGN released its 2022 Compliance Benchmark Report. The 2022 Compliance Benchmark Survey was conducted from November 2021 through January 4, 2022 and was comprised of questions about where these professionals see their compliance and cybersecurity programs going in 2022. Survey participation w…
  continue reading
 
The CyberPHIx Roundup is your quick source for keeping up with the latest cybersecurity news, trends, and industry-leading practices, specifically for the healthcare industry. In this episode, our host Brian Selfridge highlights the following topics trending in healthcare cybersecurity this week: Highlights from the US Senate HELP hearing discussin…
  continue reading
 
Major shifts in the delivery of healthcare are introducing new and unforeseen cybersecurity and privacy risks. Cybersecurity and risk leaders in healthcare must rapidly adapt their programs and protection mechanisms to avoid adverse impacts from evolving cyber threats. Any one of these emerging risk areas can cut deep and have material impacts to p…
  continue reading
 
Loading …

Quick Reference Guide