Blaise Wabo's guest appearances

Blaise Wabo

Compliance Perspectives

ITSPmagazine

Jenny Radcliffe

Alison Levine

Sam Houston

Robert Lee

Andrew Smith

Robin Smith

Kathleen Smith

Omar Khawaja

Adam Levin

David Cross

Stephanie Lucas

Jeffrey Smith

Joel Makower

Michael Levin

Caleb Barlow

OwlTail

Posted by:  Adam TurteltaubThe war in Ukraine and pandemic have both dramatically changed the cyberthreat landscape for healthcare entities.There are many more employees working from home, as well as patients communicating with their physicians remotely.  At the same time, governments have warned of potential cyberattacks by Russia.Even without these threats, ransomware provides its own challenges.  As Blaise Wabo, Healthcare and Financial Services Leader for A-Lign explains in this podcast, it’s a fast-growing threat.  Deloitte research indicates that ransomware attacks increased by 1755% in 2021.So how should healthcare entities respond?  Start by focusing on your people, he advises.  They tend to be the weakest link in the security chain.  Some common challenges: 	A lack of encryption of their home WIFI 	Routers still with the default password 	Connecting from Starbucks, the airport or hotel without using a VPN 	Falling for a phishing attackTo manage the risk, he recommends starting with a risk assessment that includes third-party suppliers and your supply chain.  Determine the vulnerabilities and rank the risks.  Then begin implementing controls.  Encrypt PHI, even in transit.  Conduct phishing training for your staff.  Hire a third party to do a penetration test and identify gaps in your security.In addition to preventing problem, steps like these can help when one occurs, given the provisions of the HIPAA Safe Harbor Act.Listen in for more advice and learn how to navigate an increasingly challenging cyber landscape.

Posted by:  Adam Turteltaub The war in Ukraine and pandemic have both dramatically changed the cyberthreat landscape for healthcare entities. There are many more employees working from home, as well as patients communicating with their physicians remotely.  At the same time, governments have warned of potential cyberattacks by Russia. Even without these threats, ransomware provides its own challenges.  As Blaise Wabo, Healthcare and Financial Services Leader for A-Lign explains in this podcast, it’s a fast-growing threat.  Deloitte research indicates that ransomware attacks increased by 1755% in 2021. So how should healthcare entities respond?  Start by focusing on your people, he advises.  They tend to be the weakest link in the security chain.  Some common challenges: 	A lack of encryption of their home WIFI 	Routers still with the default password 	Connecting from Starbucks, the airport or hotel without using a VPN 	Falling for a phishing attack To manage the risk, he recommends starting with a risk assessment that includes third-party suppliers and your supply chain.  Determine the vulnerabilities and rank the risks.  Then begin implementing controls.  Encrypt PHI, even in transit.  Conduct phishing training for your staff.  Hire a third party to do a penetration test and identify gaps in your security. In addition to preventing problem, steps like these can help when one occurs, given the provisions of the HIPAA Safe Harbor Act. Listen in for more advice and learn how to navigate an increasingly challenging cyber landscape.

Blaise Wabo on the Healthcare Cyberthreat Landscape [Podcast]

Rudi Perkins

Suppose you're like Rudi, who, six years ago, tried to bring his organization to an effective level of compliance and increase his security posture by managing multiple spreadsheets. In that case, you're probably finding yourself going nuts — just like Rudi did, and many others do, when faced with a similar complex and overwhelming situation. On the other hand, if you haven't started yet and wonder what situation we're talking about, picture yourself in this scenario: Figuring out the mapping of all the various regulations, standards, and frameworksAligning that mapping to your own unique environmentRunning on your own unique technology stackCreating and managing your own policiesProtecting those with your own unique controls (or lack thereof) Having fun yet? Likely not.  Thankfully, this is when Rudi's and Blaise's stories — individually and collectively — can make a world of difference for you. They've figured many things out: they found the right processes, tools, and partners to make this experience better overall. They've created an experience they want, driven by a common framework that maps all of those things together, giving you the means to do the controls assessment, identify and mitigate the gaps, and then apply that work to many standards, frameworks, and regulations in the US and abroad. In short, what HITRUST and its Assessor community are doing here is to enable the business — individually and collectively as part of a larger supply chain — to operate securely within the boundaries of the regulatory and industry requirements for which they must abide. "Our customers expect that of us. Our partners expect that of us. We should expect that of each other and of ourselves too."  —Sean Martin Note: This story contains promotional content. Learn more. ____________________________ GuestsBlaise WaboOn Linkedin 👉https://linkedin.com/in/blaise-wabo-cpa-cisa-citp-ccsk-ccsfp-b881331bOn Twitter 👉https://twitter.com/BlazeWabo Rudi Perkins, CTO, Welvie____________________________ Catch the webcast and the podcast here: https://itspm.ag/hitrust-a-lign-welvie-story Be sure to visit HITRUST at https://itspm.ag/itsphitweb to learn more about their offering. ____________________________ Resources The Do’s and Don’ts of Getting Started with HITRUST: https://a-lign.com/getting-started-with-hitrust/ The HITRUST CSF Companion Guide: https://a-lign.com/resources/hitrust-companion-guide/ HITRUST Central: https://hitrustcentral.influitive.com/users/sign_in ____________________________ Are you interested in telling your story?https://www.itspmagazine.com/telling-your-story

Suppose you're like Rudi, who, six years ago, tried to bring his organization to an effective level of compliance and increase his security posture by managing multiple spreadsheets. In that case, you're probably finding yourself going nuts — just like Rudi did, and many others do, when faced with a similar complex and overwhelming situation. On the other hand, if you haven't started yet and wonder what situation we're talking about, picture yourself in this scenario: <ul><li>Figuring out the mapping of all the various regulations, standards, and frameworks</li><li>Aligning that mapping to your own unique environment</li><li>Running on your own unique technology stack</li><li>Creating and managing your own policies</li><li>Protecting those with your own unique controls (or lack thereof)</li></ul> Having fun yet? Likely not.  Thankfully, this is when Rudi's and Blaise's stories — individually and collectively — can make a world of difference for you. They've figured many things out: they found the right processes, tools, and partners to make this experience better overall. They've created an experience they want, driven by a common framework that maps all of those things together, giving you the means to do the controls assessment, identify and mitigate the gaps, and then apply that work to many standards, frameworks, and regulations in the US and abroad. In short, what HITRUST and its Assessor community are doing here is to enable the business — individually and collectively as part of a larger supply chain — to operate securely within the boundaries of the regulatory and industry requirements for which they must abide. "Our customers expect that of us. Our partners expect that of us. We should expect that of each other and of ourselves too."  —Sean Martin Note: This story contains promotional content. <a href="https://www.itspmagazine.com/their-infosec-story" rel="nofollow" target="_blank">Learn more</a>. ____________________________ Guests Blaise Wabo On Linkedin 👉<a href="https://linkedin.com/in/blaise-wabo-cpa-cisa-citp-ccsk-ccsfp-b881331b" rel="nofollow" target="_blank">https://linkedin.com/in/blaise-wabo-cpa-cisa-citp-ccsk-ccsfp-b881331b</a> On Twitter 👉<a href="https://twitter.com/BlazeWabo" rel="nofollow" target="_blank">https://twitter.com/BlazeWabo</a> Rudi Perkins, CTO, Welvie ____________________________ Catch the webcast and the podcast here: <a href="https://itspm.ag/hitrust-a-lign-welvie-story" rel="nofollow" target="_blank">https://itspm.ag/hitrust-a-lign-welvie-story</a> Be sure to visit HITRUST at <a href="https://itspm.ag/itsphitweb" rel="nofollow" target="_blank">https://itspm.ag/itsphitweb</a> to learn more about their offering. ____________________________ Resources The Do’s and Don’ts of Getting Started with HITRUST: <a href="https://a-lign.com/getting-started-with-hitrust/" rel="nofollow" target="_blank">https://a-lign.com/getting-started-with-hitrust/</a> The HITRUST CSF Companion Guide: <a href="https://a-lign.com/resources/hitrust-companion-guide/" rel="nofollow" target="_blank">https://a-lign.com/resources/hitrust-companion-guide/</a> HITRUST Central: <a href="https://hitrustcentral.influitive.com/users/sign_in" rel="nofollow" target="_blank">https://hitrustcentral.influitive.com/users/sign_in</a> ____________________________ Are you interested in telling your story? <a href="https://www.itspmagazine.com/telling-your-story" rel="nofollow" target="_blank">https://www.itspmagazine.com/telling-your-story</a>

The Business Value Of A Security First Approach As A Means To Achieve And Maintain Compliance | A HITRUST Customer And Partner Story With Rudi Perkins (Welvie) And Blaise Wabo (A-LIGN)