--- title: BlueOrange Blog | John Dimaggio (3) description: (3) --- [![](https://info.blueorangecompliance.com/hs-fs/hubfs/BOC_Logo_RGB_2C_BlueOrange%20-%20resize%20for%20screen%20branding%20zoho.jpg?width=308&height=97&name=BOC_Logo_RGB_2C_BlueOrange%20-%20resize%20for%20screen%20branding%20zoho.jpg)](https://info.blueorangecompliance.com/) - [Contact Us](https://www.blueorangecompliance.com/contact-us/) ## John Dimaggio ### Recent Posts ### [Healthcare IT Cyber Security March 23, 2016 | by John Dimaggio News of a Healthcare security breach or ransomware incident has become almost commonplace.   Hackers have developed increased proficiency in identifying and exploiting security vulnerabilities in healthcare IT security, and environments that are otherwise considered “HIPAA compliant” are certainly not immune.   Protected Health Information (PHI) is a juicy target for hackers because it provides huge payoffs on the “dark web”, where hackers openly promote themselves and their stolen wares.  In Cyber Security](https://info.blueorangecompliance.com/blog/healthcare-it-cyber-security) ### [Is Your Organization Ready for the 2016 OCR  HIPAA Audits? March 16, 2016 | by John Dimaggio If you are a covered entity or business associate, the Office for Civil Rights (OCR) may have you in its crosshairs.   In a recent interview, Devyn McGraw, OCR’s Deputy Director of Health Information/Privacy, announced that the new audit protocol is completed and will be released in April, with random audits to follow shortly thereafter. In OCR Random Audits](https://info.blueorangecompliance.com/blog/is-your-organization-ready-for-the-2016-ocr-random-hipaa-audits) ### [Could your Organization be the next Ransomware victim? March 8, 2016 | by John Dimaggio Ransomware is a type of malware that restricts access to the infected computer system, and demands that the user pay a ransom to the malware operators to remove the restriction. Some forms of ransomware systematically encrypt files on the system's hard drive, then spread to any shared network drives and other computers, and make it difficult or impossible to decrypt without paying the ransom for the encryptionkey. Other forms of Ransomware may simply lock the system anddisplay messages intended to coax the user into paying to acquire the key. Ransomware typically propagates as a trojan, whose payload is disguised as a seemingly legitimate file.](https://info.blueorangecompliance.com/blog/could-your-organization-be-the-next-ransomware-victim) In Ransomware ### [Don't Forget about HIPAA Privacy! February 23, 2016 | by John Dimaggio In today’s world of HIPAA regulations, not developing a plan for Privacy compliance is risky business for Healthcare providers. Multiple government agencies are actively enforcing these laws, and the penalty for non-compliance can be costly. With so much focus on HIPAA Security, the HIPAA Privacy Rule can sometimes go unheeded. Yet the government is just as serious about enforcing Privacy regulations, and enforcement is clearly within the scope of Office for Civil Rights HIPAA audits. In HIPAA Privacy Compliance](https://info.blueorangecompliance.com/blog/dont-forget-about-hipaa-privacy) ### [Security Awareness Reminders to Help Avoid Common Scams February 9, 2016 | by John Dimaggio Healthcare organizations are facing a rising threat of malicious attacks that target protected health care information. The number of incidents that evade traditional security defenses are increasing at an alarming rate, and with the growing prevalence of EHRs, the playing field has become even more enticing to scammers. Couple this with tax season, and it seems like the email and phone scams increase substantially. While it’s always a good idea to be vigilant and help educate employees to be on guard, some extra reminders during this time of year can be a great benefit! Here are some common scams popping up again, as identified by the FTC:  In Common Scams](https://info.blueorangecompliance.com/blog/security-awareness-reminders-to-help-avoid-common-scams) ### [Don't Get Hooked by a Phishing Expedition February 2, 2016 | by John Dimaggio In today’s fast-paced electronic world, Phishing attacks are once again becoming more prevalent. As companies shore up their security footprints, Hackers are forced to be more creative to get in, and usually try to prey on unsuspecting or unknowing users who they hope are too busy to pay attention to the details. In Phishing](https://info.blueorangecompliance.com/blog/dont-get-hooked-by-a-phishing-expedition) ### [Password Strategies as Part of Your HIPAA Compliance Plan January 26, 2016 | by John Dimaggio There’s an old joke about passwords:  *During a recent password audit at our company, it was found that someone was using the following password:* *MickeyMinniePlutoHueyLouieDeweyDonaldGoofyColumbus* *When asked why they had such a long password, they said that they had been told that it had to be at least 8 characters long and include at least one capital!* While it’s easy to laugh at the punchline, password strength and complexity is no laughing matter to a Compliance Officer. Passwords are one of the primary security breach points, and depending on level of access, can sometimes be the keys to the kingdom. In Password Strategies](https://info.blueorangecompliance.com/blog/password-strategies-as-part-of-your-hipaa-compliance-plan) ### [Will you be audited for Meaningful Use? August 25, 2015 | by John Dimaggio The government is serious about enforcing Privacy and Security regulations.  In addition to potential HIPAA audits, any provider who receives an electronic health record (EHR) incentive payment for either the Medicare EHR Incentive Program or the Medicaid EHR Incentive Program may be subject to a Meaningful Use (MU) audit. In fact, each year, at least 1 in 5 eligible hospitals will be audited for Meaningful Use.    In Meaningful Use](https://info.blueorangecompliance.com/blog/will-you-be-audited-for-meaningful-use) [Previous](https://info.blueorangecompliance.com/blog/author/john-dimaggio/page/2) [All posts](https://info.blueorangecompliance.com/blog/all) ### Recent Posts ### Topic Cloud - [Cyber Security (10)](https://info.blueorangecompliance.com/blog/topic/cyber-security) - [OCR Random Audits (8)](https://info.blueorangecompliance.com/blog/topic/ocr-random-audits) - [HIPAA Security (3)](https://info.blueorangecompliance.com/blog/topic/hipaa-security) - [Common Scams (1)](https://info.blueorangecompliance.com/blog/topic/common-scams) - [HIPAA Privacy Compliance (1)](https://info.blueorangecompliance.com/blog/topic/hipaa-privacy-compliance) - [Meaningful Use (1)](https://info.blueorangecompliance.com/blog/topic/meaningful-use) - [Password Strategies (1)](https://info.blueorangecompliance.com/blog/topic/password-strategies) - [Penetration Testing (1)](https://info.blueorangecompliance.com/blog/topic/penetration-testing) - [Phishing (1)](https://info.blueorangecompliance.com/blog/topic/phishing) - [Ransomware (1)](https://info.blueorangecompliance.com/blog/topic/ransomware) - [Security Awareness Training (1)](https://info.blueorangecompliance.com/blog/topic/security-awareness-training) ### Popular Posts ### CTA Area © 2026 BlueOrange Compliance