Content by Marianne Kolbasuk McGee

Tips for Getting the Most From an MSSP

Marianne Kolbasuk McGee  •  November 12, 2018

How can organizations get the most out of partnering with managed security services providers and avoid common pitfalls? Cybersecurity consultant Vito Sardanopoli, an experienced CISO, offers top tips.

Eye Clinic Sees Quick Recovery from Ransomware Attack

Marianne Kolbasuk McGee  •  November 2, 2018

An Iowa eye clinic and its affiliated surgery center recently recovered from a ransomware attack on their common systems within one day and without paying a ransom. This case offers important reminders to other healthcare entities and their vendors about advance planning.

Analysis: Did Anthem's Security 'Certification' Have Value?

Marianne Kolbasuk McGee  •  October 23, 2018

Health insurer Anthem had earned HITRUST Common Security Framework certification before its mega-breach. Now that the insurer has agreed to a $16 million HIPAA settlement with federal regulators, who spelled out the company's security shortcomings, it's worth scrutinizing the value of adopting a framework.

Anthem Mega-Breach: Record $16 Million HIPAA Settlement

Marianne Kolbasuk McGee  •  October 16, 2018

Federal regulators have smacked health insurer Anthem with a record $16 million HIPAA settlement in the wake of a cyberattack revealed in 2015, which impacted nearly 79 million individuals. What missteps does the settlement highlight?

Medtronic Cardiac Devices Recalled Due to Cyber Concerns

Marianne Kolbasuk McGee  •  October 12, 2018

The FDA has announced a "voluntary recall" by Medtronic of certain internet-connected programmers for implantable cardiac devices due to cybersecurity vulnerabilities. Some security experts are hopeful that this will serve as a wake-up call for more manufacturers to take action on addressing cybersecurity issues.

White House National Cyber Strategy: An Analysis

Marianne Kolbasuk McGee  •  September 26, 2018

A national cybersecurity strategy document released by the White House last week - along with comments from a top Trump administration official that the U.S. would step up its offensive cyber measures - are getting mixed reviews from cybersecurity experts.

GDPR Compliance: Common Misconceptions

Marianne Kolbasuk McGee  •  September 19, 2018

Attorney Elizabeth Harding clears up confusion about certain provisions of the EU's General Data Protection Regulation, including the issue of when organizations need to obtain a European consumer's consent to process their data.

Alert: 'Ryuk' Ransomware Attacks the Latest Threat

Marianne Kolbasuk McGee  •  September 7, 2018

Organizations should be on guard for attacks involving an apparent variant of Hermes ransomware - dubbed Ryuk - that attempts to encrypt network resources. It has already victimized several global organizations in the U.S. and elsewhere, according to a federal alert, which offers mitigation advice.

Ransomware Recovery: Don't Make Matters Worse

Marianne Kolbasuk McGee  •  September 5, 2018

A recent incident involving a chronic care management company spotlights how paying a ransom to recover decryption keys from ransomware attackers can put sensitive data at additional risk. Security experts offer insights on how to prepare for the many challenges posed by attacks.

The 'Appropriate' Use of Analytics for Breach Detection

Marianne Kolbasuk McGee  •  September 4, 2018

The appropriate use of predictive analytics, going beyond a "set it and forget it" approach, could dramatically improve breach detection, says Teresa Grogan, CIO of the consultancy VertitechIT .

Regulations Create Pressure to Take Privacy More Seriously

Marianne Kolbasuk McGee  •  August 28, 2018

Companies that want to continue doing business globally will need to take privacy much more seriously, especially in light of increasingly strict new laws, ranging from the California Consumer Privacy Act to the EU's GDPR, says privacy and security expert Michelle Robles.

Messy Insider Breach Impacts 258,000 Over Five-Year Span

Marianne Kolbasuk McGee  •  August 20, 2018

A messy insider incident - allegedly involving an elected official in Wisconsin who is suspected of installing keylogging software to inappropriately access county systems over a five-year span - has impacted more than 258,000 individuals.

Cyber Warnings About Certain Philips Medical Devices

Marianne Kolbasuk McGee  •  August 16, 2018

The Department of Homeland Security and Philips have issued alerts about cyber vulnerabilities that have been identified in some of the company's medical devices. Are device makers becoming more forthcoming about cyber issues?

Are Legacy Medical Device Security Flaws Going Unfixed?

Marianne Kolbasuk McGee  •  August 13, 2018

Many medical device makers appear to building better cybersecurity into their products, but some manufacturers are still avoiding fixing vulnerabilities in legacy devices that pose potential safety risks, says security researcher Billy Rios, who discusses the latest flaws in some Medtronic cardiac devices.

HIPAA Security Rule Turns 20: It's Time for a Facelift

Marianne Kolbasuk McGee  •  August 10, 2018

As the HIPAA security rule turns 20, it's time for regulators to make updates reflecting the changing cyberthreat landscape and technological evolution that's happened over the past two decades, says security expert Tom Walsh.