Articles
Plain-language notes on HIPAA security for small medical practices.
A firewall and antivirus don't make your practice HIPAA compliant
Both are real controls. Neither is close to enough, and treating compliance as a purchase is the problem.
Read articleYour former IT provider may still have access to your systems
Ending the relationship doesn't end the access. It's the step most often missed when a practice changes IT support.
Read articleRequired vs. addressable: the most misunderstood words in HIPAA
Addressable doesn't mean optional. It means decide, and justify the decision in writing.
Read article