March 2008 - Page 3 of 3 -

Archive for March, 2008

FREE Resource Overflowing With Great Info Sec & Privacy Articles Just Published

Monday, March 3rd, 2008

Long time dear friends and colleagues of mine, Tom and Justin Peltier, just published their “2007 Year in Review.”
It is a great, FREE, resource to add to your information security, privacy and compliance files.
Here are the folks who contributed, along with the articles they wrote:

Tags:2007 Year in Review, awareness and training, Information Security, IT compliance, Justin Peltier, policies and procedures, risk management, security awareness, security training, Tom Peltier
Posted in Information Security, Privacy and Compliance | No Comments »

3rd HIPAA Criminal Indictment; Another Insider Job

Sunday, March 2nd, 2008

On February 15, Leslie A. Howell, from Oklahoma City, OK, was indicted for violating the Health Insurance Portability and Accountability Act (HIPAA) of 1996 as part of an identity theft scheme.

Tags:awareness and training, HHS, HIPAA, identity theft, Information Security, IT compliance, Leslie Howell, patient privacy, personally identifiable information, PII, policies and procedures, privacy breach, risk management, security awareness, security training
Posted in Non-compliance Sanctions Examples | No Comments »

Will Bad News Come in 3’s For Health Net?

Saturday, March 1st, 2008

In the past several days Health Net made the news…in ways they would rather not have…
First this on 2/22:

Tags:awareness and training, Health Net, HIPAA, Information Security, IT compliance, personally identifiable information, PII, policies and procedures, privacy breach, risk management, security awareness, security training
Posted in Privacy Incidents | No Comments »