Blog Archives

Expert Spotlight - Bethany Paige Ishii

Meet Bethany Page Ishii, VP of Cybersecurity Strategy and Advisory at Meditology. Bethany leads our advisory and professional services practice, helping healthcare organizations strengthen cybersecurity, governance, risk management, and regulatory compliance. Read More

Published On August 6, 2026

Healthcare Ransomware Preparedness: An Incident Response Playbook + First-24-Hours Checklist

A practical healthcare incident response playbook for ransomware: roles, decisions, comms, and a first-24-hours checklist you can adapt. Read More

Published On July 28, 2026

PCI DSS in Healthcare: Who Needs It, What’s In Scope, and a Practical Readiness Checklist

A practical guide to PCI DSS in healthcare: who needs it, what’s in scope, common pitfalls, and a readiness checklist for teams. Read More

Published On July 21, 2026

OCR Readiness: Be Prepared for Investigations and Corrective Action Plans

When the Office for Civil Rights (OCR) comes knocking, the stress level in any healthcare organization inevitably spikes. However, a proactive approach to OCR investigation readiness can transform a high-pressure audit into an opportunity for organizational growth. Effective preparation is not just about “surviving” an audit; it is about demonstrating a culture of compliance that protects patient data and organizational reputation. Read More

Published On July 1, 2026

SOC 2 vs HIPAA: Key Differences for Healthcare Organizations

When healthcare leaders evaluate SOC 2 vs HIPAA, they are often trying to answer a larger strategic question: How can we meet federal healthcare compliance requirements while also proving to business partners, customers, and vendors that our security controls are effective? Read More

Published On June 10, 2026

Security Risk Assessments: What an SRA Should Look Like in 2026 (and How to Make It Actionable)

Threats and defenses are more automated, regulatory scrutiny is sharper, and the “checkbox” approach to healthcare compliance is officially a liability. If your cybersecurity risk assessment isn't living, breathing, and driving your security strategy and budget, it’s not doing its job. Read More

Published On May 26, 2026

Vendor Resilience Strategy: Ensuring Continuity for Critical Business Services

In 2026, vendor resilience is no longer just a compliance requirement. It is a critical component of operational resilience, business continuity, and enterprise risk management. Read More

Published On May 22, 2026

Safe and Secure Healthcare: How to Align Risk Management & Compliance for a Unified Cyber Strategy

Discover how healthcare organizations can align risk management and compliance to build a unified cybersecurity strategy, improve operational resilience, and strengthen patient trust in 2026. Read More

Published On May 14, 2026

BLOG

Expert Spotlight - Bethany Paige Ishii

Healthcare Ransomware Preparedness: An Incident Response Playbook + First-24-Hours Checklist

PCI DSS in Healthcare: Who Needs It, What’s In Scope, and a Practical Readiness Checklist

OCR Readiness: Be Prepared for Investigations and Corrective Action Plans

SOC 2 vs HIPAA: Key Differences for Healthcare Organizations

Security Risk Assessments: What an SRA Should Look Like in 2026 (and How to Make It Actionable)

Vendor Resilience Strategy: Ensuring Continuity for Critical Business Services

Safe and Secure Healthcare: How to Align Risk Management & Compliance for a Unified Cyber Strategy

Featured Blog Posts

Expert Spotlight - Bethany Paige Ishii

Healthcare Ransomware Preparedness: An Incident Response Playbook + First-24-Hours Checklist

PCI DSS in Healthcare: Who Needs It, What’s In Scope, and a Practical Readiness Checklist

OCR Readiness: Be Prepared for Investigations and Corrective Action Plans

Find the right RITHM for you.