Four security updates to get ahead of proposed 2025 HIPAA Amendments

Four security updates to get ahead of proposed 2025 HIPAA Amendment 
Cisco Duo; by Katherine Yang; 3/31/25 
Published in early January, the 2025 HIPAA Security Amendments are set to significantly enhance the protection of ePHI. The proposed changes are based off the US Department of Health and Human Services’ (HHS) goals of both addressing changes in the health care environment and clarifying what compliance obligations look like for regulated entities. Organizations have 180 days to reach compliance according to stricter standards of identity cybersecurity if the proposed updates pass. In order to be prepared, here are four things your organization or managed security service provider should focus on:  

1. Deployment of mandatory security controls ...
2. Securing against known vulnerabilities ...
3. Documentation for annual audits ...
4. Clear goals for visibility, prevention, and remediation ...

[Continue reading ...] For a fact sheet on the new HIPAA Updates, visit the HHS website.