Author Archive
61 articles written by Obi Ibeto.
A focused archive without featured content or extra filters.
A backup is not a disaster recovery plan. Home health agencies need documented, tested recovery procedures that keep patient care running during a cybersecurity incident or technology failure.
Read article
Stolen home health credentials and patient data are actively sold on dark web forums. Here's how dark web monitoring works, what it finds, and why every home health agency needs it in 2026.
Read article
The 2026 HIPAA Security Rule update makes MFA mandatory for all ePHI access at FQHCs. Here's how to implement it across a diverse community health center workforce without disrupting clinical operations.
Read article
HRSA site reviewers increasingly assess health information security as part of health center compliance reviews. Here's the cybersecurity documentation your FQHC must have ready before a visit.
Read article
Federally Qualified Health Centers face the same ransomware and phishing threats as hospitals but with a fraction of the security resources. Here's the data — and what FQHCs must do in 2026.
Read article
Cybersecurity is an allowable cost under Section 330 HRSA grants for FQHCs. Here's how to budget, justify, and fund HIPAA-required cybersecurity controls as part of your health center's grant program.
Read article
FQHCs serving patients with substance use disorders face a dual privacy framework — HIPAA and 42 CFR Part 2. Here's what each requires and how to build a cybersecurity program that protects both.
Read article
Zero Trust security assumes no user or device is trusted by default — a model that fits home healthcare perfectly. Here's how it works and what it means for your agency's HIPAA compliance.
Read article
The UnitedHealth Group breach exposed 190 million Americans. Here's what it means for home health agencies — including increased phishing risk, supply chain exposure, and patient notification obligations.
Read article
HIPAA Security Rule audits are increasing in 2026. Here's exactly how home health agencies should prepare — with the documents, controls, and evidence OCR investigators look for first.
Read article
When CMS surveyors or OCR investigators visit your hospice, these are the documents and controls they request first. Use this checklist to ensure your agency is prepared.
Read article
Multi-site FQHCs face amplified cybersecurity complexity — each site is an additional attack surface. Here's how to manage HIPAA compliance across multiple locations without proportional IT headcount.
Read article
The 2026 HIPAA Security Rule update creates mandatory cybersecurity requirements for FQHCs — and HRSA grant conditions increasingly align with these standards. Here's what your health center must have.
Read article
The Cherry Street Health Services ransomware attack exposed 182,000 patients at a Michigan FQHC. Here are the specific security failures that made it possible — and what every community health center must do differently.
Read article
A composite case study of how a ShieldForce-protected hospice agency detected and recovered from a ransomware attack without paying, without losing patient data, and without disrupting care delivery.
Read article
When field nurses access patient records from personal devices on home Wi-Fi networks, it creates HIPAA compliance gaps that most agencies haven't addressed. Here's how to close them without disrupting care delivery.
Read article
New York has the most complex cybersecurity compliance stack for home health agencies. Here's how SHIN-NY and the SHIELD Act compare to what Massachusetts, Vermont, New Hampshire, and New Jersey require.
Read article
A practical, week-by-week 90-day roadmap for home health agencies with no IT department to achieve HIPAA-ready cybersecurity — covering the 2026 Security Rule update requirements.
Read article
Choosing the wrong cybersecurity provider for your home health agency can leave you exposed. These 10 questions separate healthcare-specialized MSSPs from generic IT vendors.
Read article
The real cost of a HIPAA breach for a home health agency goes far beyond the OCR fine. Here is a complete breakdown of financial exposure — from forensic investigations to lost revenue — with 2026 figures.
Read article
Hospice agencies are among healthcare's most targeted ransomware victims — and the consequences go beyond data. Here's why attackers target hospice specifically and what meaningful protection looks like.
Read article
SHIN-NY requires documented security awareness training for all workforce members with access to health information exchange data. Here's what the training must cover and how to make it practical for field staff.
Read article
Hospice field staff frequently work with devices containing sensitive patient data in patient homes and community settings. Here's how to build a practical device security policy that works in the field.
Read article
Hospice patient records contain irreplaceable, deeply personal information — terminal diagnoses, advance directives, family dynamics. Here's why this data requires exceptional protection and what that means for your security program.
Read article
Brightree is a widely used hospice EHR, but vendor security doesn't protect your devices, networks, or staff. Here's the security layer your hospice agency must build around Brightree.
Read article
Netsmart myUnity is a leading hospice EHR — but vendor security doesn't cover your devices, networks, or staff behavior. Here's what hospice agencies must add to be HIPAA-compliant.
Read article
Hospice agencies face tightening cyber insurance underwriting in 2026. Here's exactly what controls carriers require — and what misrepresentation on your application means for your coverage.
Read article
The 2026 HIPAA Security Rule update changes several requirements from \"addressable\" to mandatory — with direct implications for hospice agencies. Here's what changed and what your agency must do.
Read article
New York home health agencies face three overlapping cybersecurity frameworks simultaneously: HIPAA, SHIN-NY, and the NY SHIELD Act. Here's how they interact and how to build one program that satisfies all three.
Read article
A confirmed breach affecting SHIN-NY data triggers specific notification obligations to your RHIO, OCR, and potentially affected individuals. Here's the exact timeline and process for NY home health agencies.
Read article
CMS Conditions of Participation don't explicitly list cybersecurity — but surveyors increasingly cite inadequate data protection as a deficiency. Here's what hospice agencies must document to pass a survey in 2026.
Read article
A ransomware attack on a home health agency doesn't just lock files — it stops care. Here's the real sequence of events when attackers strike, and what protection looks like before, during, and after.
Read article
SHIN-NY requires audit logs for all access to health information exchange data — with specific retention, review, and documentation obligations. Here's exactly what your New York home health agency needs.
Read article
The SHIN-NY Cybersecurity Policies and Procedures Program (CSPP) is the foundational compliance document for every New York home health agency participating in SHIN-NY. Here's what it contains, why it matters, and how to build one.
Read article
SHIN-NY compliance has real costs — but so does non-compliance. This guide breaks down the realistic budget for a New York home health agency to achieve and maintain SHIN-NY cybersecurity requirements in 2026.
Read article
A complete SHIN-NY compliance checklist for New York home health agencies — covering every CSPP requirement, technical control, and documentation obligation. Use this to assess your readiness before your RHIO review.
Read article
Non-compliance with SHIN-NY cybersecurity requirements carries real consequences — from RHIO suspension to HIPAA penalties. Here's what enforcement actually looks like for New York home health agencies.
Read article
SHIN-NY cybersecurity requirements are now enforceable for New York home healthcare agencies. This definitive guide explains every control, deadline, and documentation obligation — in plain English.
Read article
SHIN-NY and HIPAA are not the same compliance obligation. New York home healthcare agencies must satisfy both — and the requirements don't always overlap. Here's a clear, side-by-side comparison.
Read article
SHIN-NY requires MFA for all users accessing health information exchange data. Here's what that means in practice for nurses, billing staff, and administrators — and how to implement it without disrupting care.
Read articleDownload our complete HIPAA cybersecurity checklist for home healthcare agencies. Protect patient data, avoid OCR fines, and meet all 2026 HIPAA Security Rule requirements.
Read articleThe expected 2026 HIPAA Security Rule update could raise cybersecurity expectations for home healthcare agencies. Learn how to prepare for ePHI protection, MFA, risk analysis, vendor oversight, backup, and incident response.
Read articleUnitedHealth Group delivered 19 million in-home visits in 2025. For home healthcare agencies, this signals a permanent shift in care delivery — and a rising standard for cybersecurity, HIPAA readiness, and digital resilience.
Read article
Home care agencies are carrying more digital responsibility than ever before. Patient records, schedules, billing information, caregiver communication, payroll, referral data, and family updates now move across multiple systems —…
Read article
The Unseen Vulnerability: Protecting Patient Care in a Digital World
Read article
Learn top expert tips to avoid a $2M cybersecurity vulnerability and protect your business effectively.
Read article
ShieldForce Cybersecurity Service Now Available in the Microsoft Azure Marketplace
Read article
Application of Artificial Intelligence in Cybersecurity for SMBs
Read article
Complex Systems and Database Security: An Introduction
Read article
Common Cybersecurity Concepts that might save your Business from a Cyber Attack
Read article
What is Zero Trust Data Security
Read article
ShieldForce Press Release - ShieldForce rolls out Cybersecurity subscription plans into US Market
Read article
Cloud Security guidelines for eCommerce based businesses
Read article
The Role of Cybersecurity in the Modern World
Read article
Continuous User Authentication: Effective against Social Engineering Attacks
Read article
The Las Vegas Cyber Attacks: How to Apply Lessons Learned and Protect your Company
Read article
Top 10 Shocking Cybersecurity Strategies used by Nigerian Scammers to target US Based Businesses
Read article
Top 15 Secret Information Technology Policies Revealed to Protect your Organizations Information Assets from Financial losses and Reputational damage.
Read article
Top Secret Cybersecurity Strategies revealed to protect your human resources department from financial losses and reputational damage.
Read article
Top 10 Secret Cybersecurity Strategies Revealed to protect your workstations from financial losses and reputational damage through social engineering.
Read article
Top 10 Secret Cybersecurity Strategies revealed for protecting your employees from Financial Losses and Reputational damage.
Read article