Category: Compliance
-
Specialty-Specific HIPAA Risk Analysis: OB-GYN, Pediatrics and Pain Management
A generic risk analysis template misses the systems and access patterns that define specialty practices. What to add for three common specialties.
-
Cyber Incident Reporting for Banks and Credit Unions: A Readiness Checklist
Banks have 36 hours, credit unions have 72. A checklist for the decisions and evidence you need before the clock starts.
-
Replacing the FFIEC CAT: A Mapping Plan
The CAT sunset on August 31, 2025. A step-by-step plan to move a community institution to NIST CSF 2.0 or a sector profile with evidence ready for exams.
-
HIPAA Risk Analysis: Six Parts OCR Looks For
Every 2026 OCR corrective action plan cited here required a real risk analysis and risk management plan. The six parts small practices should have.
-
An Offboarding Checklist That Survives an Audit
OCR’s Ambry Genetics settlement turned on risk analysis, termination procedures and unique user IDs. A checklist any regulated small business can run.