Cecilia McCormick, Author at Meditology Services

The AI-Aligned CISO: Integrating AI Risk Principles to Protect Your Clinical Core

Learn how healthcare CISOs can integrate the NIST AI Risk Management Framework with HIPAA and NIST CSF to manage AI bias, privacy, and clinical risk. Read More

Published On January 14, 2026

SOC 2 Type 2 Reporting Period Considerations

Short SOC 2 Type 2 reporting periods can lead to control exceptions and audit challenges. Learn how to choose the right timeframe and prepare effectively. Read More

Published On December 17, 2025

SOC 2 Service Commitments and System Requirements

Learn how SOC 2 service commitments and system requirements shape your audit scope. Discover why they’re essential for healthcare organizations preparing for SOC 2. Read More

Published On December 10, 2025

Supply Chain Risk Management vs. Third-Party Risk Management: What's the Difference?

Discover how TPRM and SCRM differ, how each maps to NIST frameworks, and why CISOs must address both to protect healthcare operations and data. Read More

Published On December 5, 2025

How to End Vendor Assessment Fatigue: A CISO’s Strategy Guide

Learn how you can reduce vendor assessment fatigue and strengthen security with HITRUST and proactive risk management. Read More

Published On October 31, 2025

AWS Outage Highlights the Impact of Cloud Dependency

A major AWS outage exposed global cloud vulnerabilities, disrupting major apps and services. Learn why cloud resilience and redundancy are critical. Read More

Published On October 21, 2025

Crisis to Code: Unpacking the F5 Nation-State Breach and CISA’s Emergency Directive ED 26-01

Learn how the F5 nation-state breach triggered CISA’s ED 26-01—and what healthcare organizations must do to mitigate risk and ensure compliance. Read More

Published On October 21, 2025

Evaluating AI/ML Cloud Services for Compliance and Security

Learn how to assess compliance and security risks in AI/ML cloud environments and strengthen your cloud security posture with best practices. Read More

Published On October 7, 2025

BLOG

The AI-Aligned CISO: Integrating AI Risk Principles to Protect Your Clinical Core

SOC 2 Type 2 Reporting Period Considerations

SOC 2 Service Commitments and System Requirements

Supply Chain Risk Management vs. Third-Party Risk Management: What's the Difference?

How to End Vendor Assessment Fatigue: A CISO’s Strategy Guide

AWS Outage Highlights the Impact of Cloud Dependency

Crisis to Code: Unpacking the F5 Nation-State Breach and CISA’s Emergency Directive ED 26-01

Evaluating AI/ML Cloud Services for Compliance and Security

Featured Blog Posts

The AI-Aligned CISO: Integrating AI Risk Principles to Protect Your Clinical Core

SOC 2 Type 2 Reporting Period Considerations

SOC 2 Service Commitments and System Requirements

Supply Chain Risk Management vs. Third-Party Risk Management: What's the Difference?

Find the right RITHM for you.