by Felicien | Dec 2, 2019 | Education
HIPAA Compliance Basics – IT HIPAA Compliance
If you are an organization subject to HIPAA, you need to understand and comply with all relevant requirements. Learn more about how this law applies to your company.
The Health Insurance Portability and Accountability Act of 1996 set standards for all organizations that handle protected health information. In the past, HIPAA standards for privacy and security mainly applied to the management of paper health records and verbal exchanges of patient health information. In today’s modern world, however, the majority of protected health information is in a digital format, and these standards must be applied differently.
HIPAA Basics
HIPAA sets guidelines organizations must follow when they collect and store private health information. The law provides patients with certain rights to access their own health information, as well as confidentiality protections. HIPAA also outlines the steps an organization must follow when private health information has been compromised.
The Health Information Technology for Economic and Clinical Health Act
To ensure that all organizations subject to HIPAA are in compliance in the digital age, the government passed an additional law: the Health Information Technology for Economic and Clinical Health Act. Essentially, this new law raises the penalties that apply when a health organization violates any of HIPAA’s standards for privacy and security of protected health information.
How to Protect Your Data
In light of the many restrictive standards that apply to protected health information, it is essential for every organization that handles this information to take the matter seriously. Below are some tips to help you protect your data from vulnerability.
1. Invest in security software.
The right security software can help to maintain the safety of your data from hackers. Invest in advanced security software and update it as needed.
2. Train personnel.
Every employee who handles protected health information needs to understand the importance of complying with HIPAA laws. Take the time to train employees on the best practices for handling sensitive data, as well as the consequences for HIPAA violations.
3. Partner with the right professionals.
One of the best ways to keep your data safe is to partner with a reputable IT company that can design security measures to keep your network secure. The right company will also be able to help you take action quickly when a breach occurs.
4. Stay in the know.
Regulations are subject to change, and threats to your data are always evolving. Stay informed about all recent changes so you can keep your organization protected.
Keeping protected health information secure is not only ethical, but it is required by law. If you are an organization subject to HIPAA, compliance needs to be a priority at all times.
by Felicien | Nov 28, 2019 | Education
Tips to Protect Your Mac Computer from Cyber Threats
Mac computers have an excellent reputation when it comes to cybersecurity, but they can still be targeted. Find out about protecting your Mac from threats.
Malware, ransomware, phishing—the cyber threats on the internet abound, and these threats are generating an astounding cost to the people who rely on computer systems to do business. To date, the cost of cyber infections has racked up billions of dollars in costs to unwitting business owners, some of which thought they were protected. Even though Macintosh (Mac) computer systems are highly regarded for their security, they are still at risk. Here are a few tips you should know.
1. Keep your Mac properly updated.
Without a doubt, one of the biggest reasons Mac computers fall victim to a cyber-attack is because they are not updated as they are meant to be. The developers of the Mac operating systems, whether it is one of the older Mac OS versions or something more modern like Mojave, send out frequent security patches as new updates. If you have automatic updates turned off or do not take the time to update your computer manually, you could easily miss an important line of defense.
2. Use good security programs on your business Mac.
Just because you have a Mac that has a stellar reputation for protecting itself against cyber threats, it does not mean that you should not go a step further and install a good security program. These software programs are designed to catch all those things that get past the existing Mac firewalls and security defenses.
3. Keep your Mac free of unnecessary programs.
Every user has them—those unnecessary programs that are really not used often enough to be counted as valuable or useful. These unnecessary filler programs take up valuable space on your Mac computer and slow it down. If the system is already slow, it can make it harder to recognize when something is awry and something fishy is going on. Plus, the more unnecessary programs you have that you never use, the easier it is for malicious software to latch onto something and set up shop on your computer because you will never see it.
4. Get educated about the biggest threats to security on your Mac.
Knowledge is a powerful defense tactic no matter what type of computer or OS it is that you rely on as a business professional. You should take the time to familiarize yourself with the biggest MAC cyber threats and the types of cyberattacks most often occurring today. You should familiarize yourself with things like:
Phishing and how phishing attacks are carried out as well as how to avoid them
Ransomware and how it gets latched onto your Mac system
How to avoid things like malware that get attached to legitimate software
Whether you use your Mac for everyday tasks and projects at work or you have a system of Mac computers utilized by multiple employees and users within your organization, it is critical to protect your business Mac computers properly. Work with a managed IT service company to implement the best security measures and negate Mac cyber threats.
by Felicien | Nov 26, 2019 | Education
Thanksgiving wouldn’t be complete without sending a thank you to all of the local businesses in our community and a special thank you to those who put their trust in us to manage their technology.
As we spend the day reflecting on what we’re thankful for, we hope you’re doing the same (and enjoying some delicious pumpkin pie while you’re at it!)
Have a great Thanksgiving!
by Felicien | Nov 26, 2019 | Education
Managed Detection and Response could be the solution businesses are looking for in a world where cybercrime is on the rise and security experts are hard to find.
Cybersecurity is becoming much more than just a buzz word as cyberattacks on businesses increase and companies face the challenge of finding skilled cybersecurity professionals. By 2022, there could potentially be as many as 1.8 million unfilled cybersecurity jobs, a pain point for many small to medium businesses.
While cybercrime continues to threaten these very businesses, many are wondering if there is a solution to these challenges. How does a company protect significant amounts of data with limited IT and security staff? The answer comes in the form of specialized teams of security and threat analysts, or Managed Detection and Response.
Managed Detection and Response (MDR)
Similar to other Managed Service Providers, companies that specialize in MDR work to provide cybersecurity support to companies that are either lacking skills or time to manage security. What makes Managed Detection and Response unique is its comprehensive approach to dealing with threats.
MDR requires both technology and human analysis to effectively and proactively detect, remediate, and eventually eliminate cyber threats. Where other providers offer an overall software and hardware-based alert system, they are often limited in their ability to respond to, research, and diagnose the number of alerts that happen daily.
With managed detection and response, analysts sift through alerts to determine if they require action. When a response is required, they offer immediate support in resolving the issue and determining its source so that a threat of that type is less likely to occur again.
MDR also takes a proactive approach to threat detection—also called threat hunting—that helps companies determine the overall state of their cybersecurity measures. Specialized analysts are able to research why or how a threat is occurring, resulting in a more comprehensive solution. This same skill set allows them to see beyond the individual incident and understand the greater need behind your network, server, and endpoint data protection.
Improving Your Cybersecurity Defenses
While cyberattacks on big companies dominate the news headlines, it is small to medium businesses that are facing the majority of threats—and they are doing it unprepared. At least 43% of cyberattacks are directed at small businesses, but very few are prepared to deal with the onslaught. On average, these attacks cost businesses $200,000, which is more than many of them can handle.
Managed Security Services provide necessary firewall and perimeter protection for your network, and prove to be helpful in providing alerts when anomalies arise. But the amount of protection most companies need can only come in the form of a specialized and highly trained in-house security team or an MDR.
As cybercrime continues to increase, protecting more than just your company’s network perimeter will be key to improving your cybersecurity defenses. Finding and outsourcing your security needs to Managed Detection and Response could be the best way forward in a world where cybersecurity is an essential part of your company’s future.
by Felicien | Nov 23, 2019 | Education
SAML-enabled Enterprises Increase Network Security with SSO
SAML helps organizations implement single-sign-on. End-users need a single username and password for system access. SAML simplifies management of network security
One of the first things most of us do when we arrive at work is sign-on to the corporate network. On the rare occasion that we have to sign on to a specific application, we’re irritated. Why is the separate sign-on necessary? The simple answer is SAML.
What is SAML?
SAML stands for Security Assertion Markup Language. It is an open standard for sharing information across an enterprise for authentication and authorization of the end-user. It’s what lets you sign on once to access multiple applications. For SAML to work, all applications must communicate using the SAML specification. If an application cannot support SAML, the end-user will have to sign on separately.
How Does SAML Work?
A single-sign-on (SSO) environment has an identity provider where the user’s identity information is stored. When the end-user wants to use an application in the SSO environment, the application or service provider makes a request to the identity provider. The identity provider authenticates the end user’s identity and responds to the service provider’s request. The end-user is either granted or denied access.
A simplified SAML process for an end-user named Joel might flow like this:
Joel tries to sign on to his work computer. His sign on initiates a request to the company’s identity or SSO provider, asking for authentication.
The SSO provider authenticates Joel’s identity and grants him access to the network.
Joel launches his email program. His request initiates an exchange with the email application referred to as a service provider.
The service provider is configured to authenticate using SSO, so the application asks the identity provider for authentication of Joel.
The identity provider responds to the service provider with a digitally signed response that identifies Joel.
The SAML-formatted response either authenticates and authorizes Joel for the email application or denies access.
The service provider validates the identity provider’s response and either grants or denies access to the email application.
Joel accesses his email via the service provider’s application, based on the identity provider’s response.
All requests and responses must conform to the SAML protocols for exchanging information.
Why Use SAML?
SAML centralizes the authorization process. It also externalizes authentication to a separate identity provider. The configuration provides several benefits for both the end-user and the organization.
SAML provides a standard for deploying internet-based single sign-on.
SAML raises security access to the highest level. An identity provider can enforce a high level of authentication, such as Two-Factor Authentication, even if the individual applications do not support a high degree of authentication.
SAML simplifies the sign-on process for the end-user, who only has to remember a single user name and password.
SAML offers a single point for deactivation by centralizing access rights.
SAML enables the identity provider to audit access across SAML-enabled applications.
With a SAML-enabled enterprise, administration and monitoring of user access are reduced. Using an identity provider with a higher level of authentication than other applications within the network increases security. Allowing end-users to sign-on with a single username and password minimizes the number of times individuals require assistance because of forgotten passwords or usernames. The ability to control user access from a single point enables an organization to de-activate end-users quickly.
