September 2009

September 28, 2009 28 Sep'09
Information security and compliance resources from around TechTarget

The laws and regulations that CIOs and CISOs must understand and reflect in their operations are by nature applicable to many different areas of information technology. As a recent study on the ... Continue Reading
September 28, 2009 28 Sep'09
HITECH moves electronic health records forward; standards to come

Healthcare experts see HITECH improving privacy protection and metrics, but HIT standards for electronic health records are still being finalized. Continue Reading
September 28, 2009 28 Sep'09
Data breach notification law SB 20 strikes right balance: Simitian

California data breach notification law sponsor State Sen. Joe Simitian discusses what his SB 20 amendment means for privacy and whether state laws should give way to a federal law. Continue Reading

September 24, 2009 24 Sep'09
HITECH FAQ: What is the impact of the HITECH Act on IT operations?

This resource provides answers and resources to frequently asked questions regarding the Health Information Technology for Economic and Clinical Health (HITECH) Act. Continue Reading
September 24, 2009 24 Sep'09
Discovery of data breach under HITECH raises big compliance questions

The new HHS data breach discovery rule under the HITECH Act is specific, so determining exactly when a breach has been discovered becomes critically important. Continue Reading
September 22, 2009 22 Sep'09
Mass. data protection regulation passes big test in public hearing

The Massachusetts data protection regulation (201 CMR 17.00), previously attacked as too tough, now seems ready to go into effect with support from groups that originally opposed it. Continue Reading
September 17, 2009 17 Sep'09
3121 brings social networking and security challenges to Capitol Hill

By this point in 2009, most online users know about online social networking platforms like Facebook. Business users have seen many attempts to bring social networking and other Web 2.0 features ... Continue Reading
September 17, 2009 17 Sep'09
Survey shows privacy policy success lies in collaboration with IT

A new study of privacy professionals shows the importance of collaboration with IT and the need to measure the success of a privacy policy more effectively. Continue Reading
September 17, 2009 17 Sep'09
Healthcare, cybersecurity policy and privacy on legislative agenda

As Congress moves into its fall term, healthcare, cybersecurity policies and privacy top a legislative to-do list that will affect compliance and security pros. Continue Reading
September 16, 2009 16 Sep'09
Record locator service a step to health information exchange

A Minnesota health collaborative moves closer to the nation's goal of health information exchange with a record locator service that keeps data behind each facility's firewall. Continue Reading

September 15, 2009 15 Sep'09
OpenID federated identity framework set for .gov authentication pilot

A government authentication test of the OpenID identity framework could usher in the beginnings of the "identity economy." Continue Reading
September 14, 2009 14 Sep'09
D.C. CTO sees compliance, cost savings benefits to cloud computing

The CTO for the District of Columbia is staying compliant while finding cost savings and ROI through his cloud computing platform. Continue Reading
September 11, 2009 11 Sep'09
The fundamentals of information security for SMBs -- easy to read, free

Information security pros weary of explaining the basics of protecting their companies’ information, systems and networks to employees who really don’t want to be bothered might want to take a look ... Continue Reading
September 11, 2009 11 Sep'09
U.S. CIO Vivek Kundra on Data.gov, OpenID and government transparency

U.S. CIO Vivek Kundra explains how the federal government is working toward transparency and data sharing in a video interview from the Gov 2.0 Summit. Continue Reading
September 09, 2009 09 Sep'09
U.S. CTO Chopra on transparency and governing by outcomes at Gov 2.0

Aneesh Chopra is in a unique position. As the first chief technology officer (CTO) for the United States, he’s defining the role as he goes. During an interview with tech publisher Tim O’Reilly at ... Continue Reading
September 09, 2009 09 Sep'09
FTC pursuing HIPAA violations as a matter of consumer protection

The CVS Caremark case shows the FTC is ready to pursue enforcement of stronger HIPAA laws as a matter of consumer protection -- another reason to review security policies. Continue Reading
September 09, 2009 09 Sep'09
Does using ISO 27000 to comply with PCI DSS make for better security?

PCI DSS is under fire for not providing enough security in the process of securing credit card data. Using ISO 27000 to complement PCI may provide better compliance and security. Continue Reading
September 08, 2009 08 Sep'09
Online privacy: New rules for melding e-commerce and information

E-commerce has redefined individual privacy, and compliance and security officers need to practice some viral marketing to convince users online privacy is serious business. Continue Reading
September 03, 2009 03 Sep'09
Security and compliance can go together, when done in the right order

You can have security and still not be in compliance -- but you can't have true compliance without real security. How to avoid getting caught in the security and compliance trap. Continue Reading
September 03, 2009 03 Sep'09
Be ready for electronic discovery with a records retention policy

Email does not drive records retention policy -- it's about what's in the email. With a few simple steps you can help prevent electronic discovery surprises and costly fines. Continue Reading