Etactics

NOVEMBER 1, 2022

Scoping is often overlooked when preparing for a cybersecurity maturity model certification (CMMC). The purpose of this blog is to provide a resource that documents how to tailor the 320 objectives within NIST SP 800-171A to the CMMC scope. It does provide an unlikely option to restrict implementing the basic cybersecurity safeguards.

Regulations 52

Regulations 52

Etactics

JUNE 28, 2022

Since our Town Hall blogs summarize the latest news from the leading CMMC authorities, here were our key takeaways from this presentation: Only controls with a value of 1 point are allowable on a POA&M during certification. The Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) will take part alongside C3PAOs.

Integration 52

Integration 52

Etactics

OCTOBER 28, 2021

This blog takes a closer look at the regulations, manuals, policies, and instructions guiding CUI designation. Designating CUI occurs when an authorized holder determines that a specific item of information falls into a category or subcategory requiring markings and or dissemination instructions. What should you do? What isn’t CUI?

Regulations 52

Regulations Prevention 52

Etactics

AUGUST 31, 2021

Individuals Performing Services (IPS) Training The Cybersecurity Maturity Model Certification (CMMC) ecosystem consists of individuals known as performing services (IPS). This blog post will identify the differences between these individuals and organizations. Meanwhile, 181 candidates are waiting for their CMMC Level 3 assessments.

52

52

Health Populi

MAY 2, 2019

As a WEGO Health poll of patient activists found in April 2019, patients continue to share this very intimate data, even in the wake of the Facebook/Cambridge Analytica story, growing cybersecurity breaches of medical data, and a challenging environment for trust and “fake news” for health care. mobile consumers.

Health Data 123

Health Data Hospitals Healthcare Prevention 123

Etactics

AUGUST 10, 2021

Of course, what I’m referring to is the upcoming enforcement of the Cybersecurity Maturity Model Certification (CMMC). Maybe that’s what ultimately led you to this blog post. If you have any existing contracts with the DoD, you’ve probably heard the acronym “CMMC” whispered throughout your office, fueled by a general sense of fear.

Regulations 52

Regulations 52

Etactics

MARCH 22, 2022

It’s a similar concept to the first activity I mentioned in this blog post. Choose a wide range of violations from those related to cybersecurity to ones that happened on review websites. Come up with six different categories related to HIPAA. Within each category list five questions ranging in difficulty and value.

Regulations 52

Regulations Healthcare Accountability Hospitals 52

Etactics

AUGUST 22, 2023

The National Institute for Standards and Technology (NIST) publishes pioneering cybersecurity standards. Image Source: FIPS 199 Information types contained within a system determine the categorization of the system.

Integration 52

Integration Accountability 52

Etactics

JANUARY 12, 2023

The consequences of a HIPAA violation fall under two categories: civil and criminal. As bonus content, we’ve documented these instances in a separate blog post. Think of it as adding a layer of cybersecurity on top of all the other practices your organization has. They need both HIPAA training and cybersecurity training.

Accountability 52

Accountability Hospitals Regulations Healthcare 52

Etactics

JULY 16, 2021

Maybe you just started a blog that provides accurate medical information to common questions as a way to increase your patient volume. Even if you don’t blog, new patients may stumble upon your website when looking to switch their provider. Second, create blog content. There will also be a locked icon next to the URL.

Healthcare 52

Healthcare Hospitals Regulations Accountability 52

Etactics

DECEMBER 9, 2021

The Level 2 process needs to happen through a C3PAO before submitting for a Level 3 certification with the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC). On November 23, 2021, Inside Cybersecurity published a story after interviewing Ron Ross, a Fellow at NIST and one of the authors of SP 800-171. Does CMMC 2.0

Accountability 52

Accountability Integration 52

Etactics

MAY 5, 2023

European Network and Information Security Agency (ENISA) Good Practice Guide for Incident Management Forum of Incident Response and Security Teams (FIRST) CSIRT Case Classification (Example for Enterprise CSIRT) Components of Incident Response Policy This blog is going to focus on the creation of an incident response policy.

Prevention 59

Prevention Regulations Accountability 59

Etactics

JANUARY 4, 2022

Of course, what I’m referring to is the Cybersecurity Maturity Model Certification (CMMC). The basic cybersecurity requirements for Level 1 are currently listed in FAR 52.204-21. A team of assessors from the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) will certify the implementation of these expert controls.

Integration 52

Integration Regulations Accountability 52

Etactics

MAY 12, 2022

The purpose of this blog is to: Explain why you need to have an SSP Identify necessary components Review formatting considerations Discuss Plans of Action & Milestones (POA&M) Explore Automation for SSP Generation. We’ll talk more about automation at the end of this blog. Control 3.12.4 via CMMC Assessment Scope Level 2. (f)

52

52

Health Populi

JULY 1, 2019

Get a cup of coffee and sit back, because this is a long one – not the usual short and sweet entry that each of us endeavors to craft on our respective blogs. These are: Perception, Trust, Risk and the Uncertainty Produced by an Ever-Changing Context, categories that sweep in all of the issues at hand.

Pharmaceuticals 86

Pharmaceuticals Integration Health Data Patient Experience 86

HIT Consultant

FEBRUARY 27, 2023

Brian Selfridge, Healthcare Cybersecurity & Risk Leader at CORL Technologies In recent years, a wave of high-profile cyber attacks has shaken the healthcare industry to its core. Consider this blog post a guide to everything you need to know about fourth-party vendors and the risks they pose.

Healthcare 90

Healthcare Regulations Healthcare Providers 90