Five Nines Blog

Five Nines Experts Sharing Actionable IT Advice

 

How Do Managed IT Services Help Rural Clinics With Compliance?

Managed IT services help rural and specialty clinics with compliance by running the security controls HIPAA expects and documenting that work as it happens. Those controls include...

Read More

Which Managed IT Services Support Growing Healthcare Organizations?

Growing healthcare organizations are best supported by an integrated set of managed IT services: a responsive help desk, endpoint and network management, managed security with a...

Read More
What Good Looks Like: A Vendor Risk Management Program for Healthcare Under HIPAA (The CFO Governance View)

What Good Looks Like: A Vendor Risk Management Program for Healthcare Under HIPAA (The CFO Governance View)

The Five Functions a Defensible Healthcare Vendor Risk Program Must Operate Tiering and inventory of all vendors handling ePHI. Due diligence proportional to vendor criticality....

Read More
What Good Looks Like: A Clinical Phishing Program That Doesn't Disrupt Patient Care

What Good Looks Like: A Clinical Phishing Program That Doesn't Disrupt Patient Care

What a Well-Designed Clinical Phishing Program Actually Includes Clinical-realistic scenarios Tiered intervention by impact severity Outcomes measured against actual security...

Read More
What Good Looks Like: A HITRUST Readiness Program for a Sub-500-Bed Hospital

What Good Looks Like: A HITRUST Readiness Program for a Hospital

The Five Elements a Defensible HITRUST Readiness Program Requires Gap assessment substantively Remediation roadmap Evidence collection Internal validation Board governance Three...

Read More
What Good Looks Like: A Fractional Security Executive Engagement at a Clinic System

What Good Looks Like: A Fractional Security Executive Engagement at a Clinic System

The Five Elements a Fractional Security Executive Engagement Must Deliver Program leadership designation. Executive integration. Documented operation. Incident response...

Read More
What Good Looks Like: A Clinic CFO's Annual IT and Security Budget Defense

What Good Looks Like: A Clinic CFO's Annual IT and Security Budget Defense

The Six Components a Clinic Board Defense Package Must Include Regulatory obligation tied to HIPAA framework Exposure analysis with clinic-specific dollar magnitude Current...

Read More
What Good Looks Like: A Clinical Platform Vendor Governance Program Over a Multi-Year Relationship

What Good Looks Like: A Clinical Platform Vendor Governance Program Over a Multi-Year Relationship

The Six Elements of Defensible Clinical Vendor Governance Selection criteria documented. Contract review substantive. Implementation oversight. Ongoing performance review....

Read More
What a Vendor BAA Actually Obligates the Vendor To, and What It Does Not: The CEO Accountability View

What a Vendor BAA Actually Obligates the Vendor To, and What It Does Not: The CEO Accountability View

Where the Vendor's BAA Obligations End and the CEO's Program Begins A healthcare CEO whose organization runs on cloud, software-as-a-service, or any third-party platform handling...

Read More
The HIPAA Security Rule Is Changing for the First Time in Over a Decade: What a Healthcare CEO Needs to Know and Do Now

The HIPAA Security Rule Is Changing: What a Healthcare CEO Needs

Why the HIPAA Security Rule Is Being Revised — And What Changed Since 2013 The HIPAA Security Rule's last meaningful update came through the Omnibus Rule in 2013. In 2013, the...

Read More
email icon

Stay Informed

Subscribe to our newsletter to get fresh insights delivered to your inbox.