Suggestions
Rebecca Herold
CEO, The Privacy Professor - Privacy & Security Brainiacs - Author - Expert Witness - Entrepreneur - Cyber Security & Privacy Expert
Rebecca Herold, known as The Privacy Professor, is a seasoned professional with over 25 years of experience in IT, information security, and privacy.
As the CEO and Founder of Rebecca Herold, LLC and Privacy & Security Brainiacs, she has shown expertise in global privacy and security governance, compliance programs, IoT, AI, incident response, and more.
Rebecca is a highly acclaimed author having published over 20 books on various topics related to security, privacy, and compliance. She has also contributed chapters to several other publications.
In addition to her entrepreneurial ventures, Rebecca has been actively involved in academia as an Adjunct Professor, contributing to curriculum creation at Norwich University.
Her involvement in organizations such as ISACA, IAPP, IEEE, and (ISC)2 showcases her commitment to the field of information security and privacy.
Rebecca Herold's educational background includes a Bachelor of Science in Mathematics and Computer Science as well as a Master of Arts in Computer Science and Education.
She actively participates in industry-related initiatives such as the NIST IoT Cybersecurity Development SME team and has been recognized for her contributions to privacy and security.
Highlights
Hey, hey, hey!! What a great valentine to receive today! 😊 💝
Today, Feb 14, 2024, US NIST released the published the final version of Special Publication (SP) 800-66r2 (Revision 2), Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide.
This publication, revised in collaboration with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights, provides:
✅ Guidance for HIPAA covered entities (CEs) and business associates (BAs) on assessing and managing risks to protected health information (PHI), identifies typical activities that CEs and BAs might consider implementing as part of an information security program, and presents guidance that CEs and BAs can utilize in whole or in part to help improve their cybersecurity posture and support compliance with the HIPAA Security Rule.
✅ A list of resources (e.g., guidance, templates, tools) that regulated entities can consult for assistance about particular topics has been hosted on the SP 800-66r2 web page (see under “Supplemental Material” in the gray Documentation box).
✅ The key activities, descriptions, and sample questions from the tables in Section 5 of the publication have been posted in NIST’s Cybersecurity and Privacy Reference Tool (CPRT).
✅ The content in CPRT also includes mappings of the HIPAA Security Rule’s standards and implementation specifications to NIST Cybersecurity Framework Subcategories and SP 800-53r5 security controls as well as listings of NIST publications relevant to each HIPAA Security Rule standard.
Thank you to NIST’s Jeff Marron for his outstanding work on the document!
See SP 800-66r2, Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide here: https://lnkd.in/gtzwc8Sf
See SP 800-66r2 web page here: https://lnkd.in/gqYA2Paz
#HIPAA #Security #Cybersecurity #Privacy #SecurityRule #PrivacyRule #RiskManagement #CSF #SP800-66 #PHI
