BLOG

Expert Spotlight - Bethany Paige Ishii

Meet Bethany Page Ishii, VP of Cybersecurity Strategy and Advisory at Meditology. Bethany leads our advisory and professional services practice, helping healthcare organizations strengthen cybersecurity, governance, risk management, and regulatory compliance. Read More

Published On August 6, 2026

OCR Readiness: Be Prepared for Investigations and Corrective Action Plans

When the Office for Civil Rights (OCR) comes knocking, the stress level in any healthcare organization inevitably spikes. However, a proactive approach to OCR investigation readiness can transform a high-pressure audit into an opportunity for organizational growth. Effective preparation is not just about “surviving” an audit; it is about demonstrating a culture of compliance that protects patient data and organizational reputation. Read More

Published On July 1, 2026

HIPAA Risk Analysis, Risk Assessment, & Evaluation: Is There a Difference?

We hear the terms risk assessment, risk analysis, and evaluation used routinely in healthcare settings, often in the context of HIPAA compliance. The big question: is there a material difference between these terms from a HIPAA regulatory perspective? Answering this question correctly is critical to maintaining HIPAA compliance and staying out of hot water with regulators. Many organizations that have misunderstood and misapplied these terms have ended up facing multi-million-dollar settlements with the Office for Civil Rights (OCR) for failure to comply with the HIPAA Security Rule. Read More

Published On September 6, 2022

New NIST Guidance on Compliance with the HIPAA Security Rule

NIST has released new guidance for covered entities to comply with the HIPAA Security Rule. The publication is titled: "Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide". This blog post provides a summary of key points in the new NIST publication alongside Meditology’s analysis and further recommendations in support of NIST’s guidance. Read More

Published On August 15, 2022

PCI DSS v4.0 Released: Compliance Requirements for Healthcare Organizations

The PCI Security Standards Council has released the much-anticipated PCI DSS version 4.0 this week. The update is several years in the making and includes significant control requirement overhauls. Healthcare organizations must update policies, procedures, and control requirements to maintain compliance with the new PCI v4.0 standard. This blog post provides details about the new requirements for PCI v4.0 and the timing for compliance for healthcare entities. Read More

Published On April 6, 2022

Shields Up: Russia/Ukraine Cyberwar Preparation & Response for Healthcare

Healthcare organizations are scrambling to adjust their cybersecurity preparation and response capabilities in the wake of potential cyberattacks stemming from the ongoing conflict between Russia and Ukraine. Meditology has been monitoring the situation closely and advising our healthcare clients on the latest threat vectors and response approaches. This blog post provides guidance for US-based healthcare entities for preparing and responding to cyberattacks and cyberwar tactics deployed as part of this ongoing conflict. Read More

Published On March 1, 2022

Featured Blog Posts

Expert Spotlight - Bethany Paige Ishii

Read

Healthcare Ransomware Preparedness: An Incident Response Playbook + First-24-Hours Checklist

Read

PCI DSS in Healthcare: Who Needs It, What’s In Scope, and a Practical Readiness Checklist

Read

OCR Readiness: Be Prepared for Investigations and Corrective Action Plans

Read
Keep Up
With Meditology
Be the first to receive exclusive IT risk management updates.