Security

HIPAA Compliant Infrastructure: How to Build a Secure Foundation for ePHI

If your organization is comparing a basic cloud stack to HIPAA compliant infrastructure, the real question is not just where your applications run. It is whether your environment is built to protect electronic protected health information with the right safeguards, documentation, access controls, and vendor support. For teams that want a faster path to a... Continue reading

Trump Cyber Strategy 2026: What It Means for Healthcare Cybersecurity

The White House has released President Trump’s Cyber Strategy for America, a short but important policy document that signals a more aggressive federal cyber posture. For healthcare organizations, the main takeaway is simple: cybersecurity is being framed even more explicitly as a critical infrastructure issue, not just an IT issue. That matters because healthcare organizations... Continue reading

HIPAA Security Questionnaire: The Gap Between What You Say and What Buyers See

In this episode of the HIPAA Insider Show, we sit down with Larry Trotter II, Founder of Inherent Security, to unpack a hard truth in healthcare sales: You can sign every BAA, check every box on the HIPAA security questionnaire, and still lose the deal. Why? Because enterprise healthcare buyers don’t just evaluate answers —... Continue reading

Is Zoom HIPAA Compliant? A Complete Guide for Healthcare Providers

Telehealth is no longer optional. As virtual care becomes standard practice, healthcare providers continue asking: Is Zoom HIPAA compliant? The answer is conditional. Zoom can be HIPAA compliant, but it is not compliant by default. Whether Zoom meets HIPAA standards depends on your subscription level, a signed Business Associate Agreement (BAA), proper security configuration, and... Continue reading

Securing Telehealth in a Vulnerable World 

Telehealth is no longer a temporary response to a crisis or an experimental care option. In 2026, secure telehealth is a permanent, expected component of healthcare delivery—supporting primary care, behavioral health, follow-ups, and specialty consults across the industry. What has changed since the early days of telemedicine is not adoption, but exposure. Healthcare organizations now... Continue reading

FERPA vs HIPAA: Which Privacy Law Applies to Student Medical Records?

Organizations that handle student health information often default to HIPAA — but in education environments, that assumption is frequently wrong. Understanding FERPA vs HIPAA is critical for schools, universities, healthcare partners, and vendors because misclassifying which law applies can lead to improper disclosures, failed audits, and incorrect responses to breaches or record requests. This guide... Continue reading