Too many healthcare providers fail to conduct comprehensive, timely risk assessments, as required under HIPAA as well as the HITECH Act, says security consultant Kate Borten, president of The ...

NIST SP 800-30 is a standard developed by the National Institute of Standards and Technology. Published as a special document formulated for information security risk assessment, it pertains ...

Get the latest federal technology news delivered to your inbox. To put it succinctly, they are two different frameworks. As industry and government work together to execute this order, it is very ...

Combine structured frameworks with a customizable assessment model to turn strategic fog into prioritized remediation plans with the most value. To keep up with a quickly changing threat environment, ...