Compliance & Risk Management

These two new HIPAA settlements are meant to send a strong message about enforcement and accountability. The result for one of those cases was a record-setting settlement of $5.55 million.

What happens when IT purchases are made with the explicit permission of IT but without specific oversight? With proper planning and guidelines, decentralized IT does not need to lead to true Shadow IT.

Current control mechanisms are unable to keep pace with the growing impact that cybercrime has on organizations. As a result, businesses are more likely to incidents with longer term impact.

Just as organizations were slow to protect the endpoint, regulators were equally slow to spell out their requirements for data protections on the endpoint. But they're catching up now.

Under the GDPR, organizations may be subject to data protection audits at any time as well as strict penalties for non-compliance. Preparation over the next two years is key.