Governance, Risk and Compliance

Covered entities have until March 1, 2017, to disclose small HIPAA breaches. Here are the implications for VARs, MSPs & business associates.

The U.S. & Swiss governments finalized an agreement allowing multinationals to transfer personal data between the two countries. Nixon Peabody explains.

Compliance programs that are a part of business operations lower the burden on your employees and the customers they serve. CEB explains how.

Fake HIPAA audit emails are actually phishing attacks. And those HIPAA phishing attacks could morph into ransomware attacks, pundits warn.

Latest HIPAA settlement reveals need for new security risk assessments after IT or operational changes. Nixon Peabody explains.

Amid the Wells Fargo scandal, it's a prime time to examine your business ethics across sales, compliance, risk, data privacy & internal audit. CEB explains.

The Office for Civil Rights (OCR) has issued guidance on “HIPAA and Cloud Computing” accompanied by a series of frequently asked questions (FAQs).