Collaborate Disseminate
<p>Many payment processors sell “End-to-End Encryption” (E2EE) payment terminals with slick marketing that describes how well the solution protects payment card data. While encryption is an effective tool for protecting…</p>
<p>This post is intended to help organizations understand how the Health Insurance Portability and Accountability Act (HIPAA) Security, Breach Notification, and Privacy Rules apply to them, either directly as a Covered…</p>
<p>Many teams working with health care providers receive requests to sign a Business Associate Agreement. In this blog, we break down HIPAA’s definition of a “Business Associate” to help you know if signing is necessary.</p>
… Continue reading HIPAA Business Associates – What’s Your Function?
<p>Some organizations within the health care sector may believe that they are a Covered Entity simply because they handle health records (spoiler alert: this might not be the case). This often occurs due to…</p>
Continue reading HIPAA Covered Entities – It’s More Than Just PHI
<p>Many organizations don’t understand that not all health information is PHI and apply HIPAA more broadly than is required. This has implications for which organizations are considered Business Associates (because an…</p>
… Continue reading HIPAA Protected Health Information – When Health Information Isn’t Protected
<p>A major step on the CMMC rollout timeline was completed recently as the regulatory change that will create the CMMC contract clause made its way to the Office of Information and Regulatory Affairs (OIRA). This post…</p>
<p>Many DoD contractors are struggling to understand what requirements will apply to them once CMMC rolls out. CMMC defines three levels, but CMMC Level 2 may allow a self-assessment or may require a third-party…</p>
Continue reading CMMC Level and Assessment Requirements for Defense Contractors
<p>Implementing CMMC and other Controlled Unclassified Information (CUI) protection obligations depends on the accurate identification of CUI, and in some cases also depends on the identification of the CUI categories and…</p>
<p>Defense subcontractors may already be seeing CMMC clauses in their contracts, even though the CMMC contracting procedures and contract clause have yet to be finalized (as of this post in August 2025). However, the…</p>
… Continue reading The Proliferation of “Fake” CMMC Contract Clauses
<p>Organizations in the health care sector and those that work with it often hear about HIPAA, HITECH, and HITRUST compliance but may not understand what they all are and what they have to do with each other. This post…</p>
… Continue reading HIPAA, HITECH, and HITRUST – It’s HI Time to Make Sense of it All