ProCircular Information Security Experts Corner

Solomon Smith

Recent Posts

A Simple Primer on DFARS NIST 800-171a Regulations

Posted by Solomon Smith on Mar 8, 2018 11:48:00 AM

As of Dec. 31 2017, contractors that store, transmit, or process certain types of government information were required to comply with DFARS (Defense Federal Acquisition Regulation Supplement) regulations.

Read More

Topics: DFARS

Diagnosing the Cybersecurity Bug

Posted by Solomon Smith on Apr 24, 2017 3:06:59 PM

Industry Trends

Cybersecurity in the healthcare field has gone through a lot changes the past few years. In 2016 there was a significant jump in the total number of healthcare specific cybercrimes.  According to SecurityIntelligence there was a 71% increase of confirmed data breaches in the healthcare sector from 2015 to 2016.  Drilling down on that increase revealed that most of the jump was from external (aka "hacking" or ransomware or malware") followed by internal non-malicious (aka accidents from insiders).  Trends are showing that cybercriminals have found more value in healthcare data and the potential for long term use is much higher because it is more difficult to change an individual’s "health data".  Another eye-opener is that the type of healthcare entities affected is not limited to hospitals.  Business associates, specialized care providers and healthcare plan have all been targets for cyber crime.  Oncology, anesthesiology, orthopedic, and radiology are a few of the specific entities that were in the top 10 largest healthcare breaches of 2016.  This data tells us that cybercriminals will target or find data outside of the large medical providers and may even be targeting the organizations that have lagged behind in implementing security controls.  

Read More

Topics: Cybersecurity, healthcare, HIPAA, Data Security, Information Security, Network Security

Cybersecurity Insurance for C-Level Executives

Posted by Solomon Smith on Apr 10, 2017 11:54:55 AM

For any business leader or CIO, navigating the world of cybersecurity insurance can be very complicated. It seems as if there are often more questions than answers, it can be difficult to know who you need to speak to in order to get what you need. This article will attempt to provide some direction, point out a few of the pitfalls, and help you to ask the right questions within your organization.


Read More

Topics: Cybersecurity, cybersecurity insurance, insurance, it risk assessment

The Significance of Data Ownership and Classification

Posted by Solomon Smith on Dec 20, 2016 7:32:00 AM

The Significance of Data Ownership and Classification

Read More

Topics: Data Ownership, Data Classification, Cybersecurity, Information Security, Data Protection, Data Retention, Data Security