On April 19-20 the BSides organization held the 6th Annual BSides San Francisco event. The event was amazing. The range of people, topics, and interactions were incredible. If you have not read up on BSides, take a quick peek now. This organization is doing #infosec right – BSides
I was very fortunate to be asked by BSides to speak on Day 2 about HIPAA.
It’s go time!!! #bsidessf day 1 rocked and here goes day 2 @bsidessf #hippa #healthit #infosec pic.twitter.com/3sf66ekecy
— Hudson (@legallevity) April 20, 2015
Among the many amazing people there I got to meet the infamous @banasidhe
#bsidessf is rocking! @bagomojo guess who I found? @banasidhe you m&m goddess! @Securithid pic.twitter.com/6qES49EeAY — Hudson (@legallevity) April 20, 2015
The facilities provided by @OpenDNS were fantastic. They provided an great venue in a great location. If you are not familiar with OpenDNS, take a quick peek over at their website and learn about the great work they do. OpenDNS
Turning to my presentation, things started off well and generated a lot of questions.
Excellent talk by @legallevity at #bsidessf on HIPAA and the wrath of the audit. pic.twitter.com/KHU8qTiMs0
— M. Ben Lawson (@mbenlawson) April 20, 2015
Also amazing was the live art during presentations. While I spoke, @kellykingman drew out my words:
Recap of great #BSidesSF talk from @legallevity on #HIPAA compliance driven approach to #healthIT #privacy #infosec pic.twitter.com/aUXogXCe0Y
— Lauren Still (@laurencstill) April 20, 2015
The art was courtesy of @tripwireinc and organized by @joepetitt2
Before wrapping up and heading back to the real world there were several questions I promised some attendees I would follow up on, here they are.
1) Third Party Security/HIPAA Gap Analysis: On the web at Parameter Security and twitter @ParameterHacker
2) Third Party HIPAA Compliance: On the web at HIPAATrek and twitter @HIPAATrek
3) Post Regarding 60 Minute Notification Requirements for HIPAA Breach in Texas
4) More information regarding the Alaska Thumb Drive HIPAA Breach
5) Info on the HHS Security Risk Analysis Tool
6) Information on NIST HIPAA Compliance ToolKit
7) Information on what HIPAA requires for Encryption
Thank you again to BSides for an amazing opportunity and thank you for reading my blog. Up next week, I will do a review and walkthrough of HIPAATrek compliance tool!
/s/ HH @legallevity