Category: Compliance
-
Texas Specialty Clinics: Where Patient Data Hides in Phones, Fax and Portals
OB-GYN, pediatric and pain management practices carry risks a generic HIPAA template misses. Start with the systems the front desk uses every day.
-
Banks and Credit Unions: Meeting the Notification Clock When Email and Phones Are Down
Federal rules give banks 36 hours and credit unions 72 hours to notify their regulator. Those clocks keep running during the outage that knocked out your email and phone system.
-
Banks and Credit Unions After the FFIEC CAT
The FFIEC Cybersecurity Assessment Tool sunset on August 31, 2025. What replaced it, where institutions get stuck, and how to show examiners evidence.
-
HIPAA Risk Analysis for Small Clinics: Do Not Forget Voice and Fax
OCR keeps citing missing risk analyses. For small clinics, the gap is often the phone system, voicemail, fax and call recordings. A practical scope.
-
Offboarding Is a Phone System Problem Too: Lessons From OCR’s Ambry Settlement
OCR’s Ambry settlement cited missing termination procedures and shared logins. For practices, offboarding includes extensions, voicemail and, in Texas, state training records.