Every year since probably my first year on this world I’ve visited cemetaries on the Sunday right before Memorial Day. My parents’ reasoning was that we could get the graves and headstones decorated (Memorial Day is also known as Decoration Day) so that those visiting on Monday would see them. Probably where I got my habit of always arriving to meetings and events WAY too early! 🙂
This past Sunday my family drove my father out to three cemetaries to once more continue this tradition…
Memorial Day & ID Theft Using Info Of Deceased
May 26th, 2009HIPAA, HITECH Act and Disposal Problems
May 21st, 2009Here’s yet another incident that provides very good lessons that could be incorporated into information security and privacy training sessions as a case study, particularly for HIPAA compliance as well as secure disposal training…
The World’s Largest (and BEST!) Cyber Defense Competition for Teens…In Ames Iowa!
May 20th, 2009Last month Iowa State University, in Ames, held a unique type of IT Olympics for teens…
Effectively Explaining the Purpose of Information Classification to Employees
May 19th, 2009The topic for my Q2 2009 issue of Protecting Information was helping employees to understand why different types of information need different levels of security. Yes, this is information classification, but I describe it in a way that employees of all levels and responsibilities throughout an organization can understand, here’s how…
HITECH Act does *NOT* make HIPAA, or HIPAA advice, “obsolete”!
May 18th, 2009A couple of weeks ago I was surprised and concerned by a statement made in one of my many listservs by a lawyer commenting on HIPAA books and past advice given for HIPAA compliance…
Secure360 Starts Tomorrow!
May 11th, 2009I drove up to St. Paul, MN, today and will be speaking, and look forward to attending the sessions, at Secure360.
Regulatory Requirements for Training and Awareness
May 7th, 2009Today I had a great conversation with a CISO about the regulatory and legal requirements for organizations to provide information security and privacy training and awareness activities…
Podcast: HITECH Act adds new compliance requirements, penalties
May 6th, 2009Last week I had the pleasure of speaking with Alexander B. Howard at SearchCompliance.com for a 26 minute podcast…
Understanding Data Protection from 4 Critical Perspectives
May 5th, 2009Today I gave a webcast (27 minutes) about “Understanding Data Protection from 4 Critical Perspectives” and it is now available online through this link…
IP Addresses Are Considered PII By Some Countries No Matter If U.S. Orgs Like It Or Not
May 4th, 2009Today on Twitter, @clarinette02 posted a link to an interesting article, “IP Addresses Are Personal Data, E.U. Regulator Says,” from a little over a year ago…
