HIPAA’s Security Rule Overhaul: What Covered Entities and Business Associates Must Do Now
What the proposed Security Rule changes mean for covered entities and business associates, and why program work should begin with evidence and priorities.
Insights
Useful context for better security decisions.
Practitioner-written articles on security, privacy, and the work behind a defensible program.
Healthcare & HIPAA
Healthcare & HIPAA
58% of Future Healthcare Workers Would Sell Patient Data: Why Insider Risk Is Now Your Greatest Threat
Research raises questions about workforce risk, information access, and how healthcare organizations prepare.
Insider Risk
Insider Risk
Insider Risk in Healthcare: Protecting Patient Data
Workforce risk is a program challenge involving access, culture, reporting, and proportionate response.
Privacy
Privacy
Not a Data Broker? California May Disagree
How privacy definitions and data practices can create obligations beyond a company’s chosen label.
Why Security Teams Must Care More About Privacy
Security decisions and privacy responsibilities are closely connected in the handling of personal information.
A Tale of Two Identities
Identity protection depends on how personal and work identities intersect across digital life.
AI & Law
AI & Law
AI in Law: Why Governance Matters More Than Adoption
Responsible adoption depends on governance, evidence, and clear boundaries, not adoption alone.
General Security
General Security
Securing Your Dealership’s DMS in 2025: A Compliance Roadmap
A practical look at dealership management systems, customer information, and security responsibilities.
Why Cybersecurity Is Hard
Why sound security is difficult to sustain and how organizations can approach the work deliberately.
Choosing the Right Security Framework
Framework selection should fit organizational context and help guide practical decisions.
Investigating Cyber Incidents Using the Security Stack
Using available telemetry and system context to support a careful incident investigation.
Is Your VPN Holding You Back?
Consider how remote access choices affect security, usability, and changing work patterns.
Securing the Real Estate Transaction Lifecycle
Security considerations for sensitive information moving through real estate transactions.
Cyber-Security in Air Traffic Management: Understanding the Power of the Security Stack
A look at security architecture and defense in air traffic management environments.
Hybrid Defense for Air Force and Navy
Perspectives on layered defense and security in hybrid operational environments.
Specialist reading
Insider risk & CMMC
Insider Risk, National Security, and the Limits of U.S. Legal Frameworks
Kenneth Vignali's specialist analysis of CMMC and protection mechanisms in the context of cyber espionage. Background reading, rather than an introductory readiness checklist.