Cyber Incident Response

How Digital Health Companies Navigate the Patchwork of State Data Privacy Laws

September 28, 2023 - Navigating compliance with HIPAA, the Federal Trade Commission (FTC) Act, and other major statutes is a complex process for any organization. However, these laws apply nationwide, making it easier for organizations that operate in multiple states to maintain compliance. A recent surge in newly enacted data privacy laws at the state level may further complicate compliance...


More Articles

DHS Tackles Cyber Incident Reporting Inconsistencies With Report to Congress

by Jill McKeon

The Department of Homeland Security (DHS) issued recommendations to Congress about how the federal government could improve critical infrastructure cyber incident reporting in a new report. Notable...

Navigating the SEC Cyber Incident Disclosure Rule, How It Impacts Healthcare

by Jill McKeon

Under the Securities and Exchange Commission’s (SEC) final rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure, publicly traded companies now are required to disclose cyber incidents without...

HSCC Releases Cybersecurity Coordinated Incident Response Template

by Jill McKeon

The Healthcare and Public Health Sector Coordinating Council (HSCC) Cybersecurity Working Group (CWG) issued a new publication, entitled “Health Industry Cybersecurity Coordinated Healthcare...

FDA, MITRE Publish Updated Medical Device Security Incident Response Playbook

by Jill McKeon

The US Food and Drug Administration (FDA) and MITRE released an updated version of their “Medical Device Cybersecurity Regional Incident Preparedness and Response Playbook.” The playbook...