Pages38 / / /about /about /accessibility-statement /accessibility-statement /blog /blog /confirmation /confirmation /contact /contact /cookies-settings /cookies-settings /faq /learning/faq /podcast /podcast /privacy-policy /privacy-policy /services /services /terms-conditions /terms-conditions /client-portal /client-portal — /about/team — /services/hipaa — /services/soc-2 — /services/iso-27001 — /services/hitrust — /services/gdpr — /services/enhancements — /services/penetration-testing — /services/vulnerability-scanning — /services/tabletop-exercises — /services/ai-governance — /industries — /industries/answering-services — /industries/healthcare — /industries/saas-health-tech — /industries/chiropractic — /industries/energy — /industries/msps — /industries/staffing — /industries/ai-data — /industries/law — /learning — /learning/guides — /firm-vs-platform — /vrc1 Courses27 /courses /training/courses /courses/ai-security-awareness-training /training/courses/ai-security /courses/bloodborne-pathogens /training/courses/bloodborne-pathogens /courses/building-a-diverse-and-inclusive-workplace /training/courses/building-a-diverse-and-inclusive-workplace /courses/cpra /training/courses/cpra /courses/cybersecurity-course /training/courses/security-awareness /courses/essential-workplace-training /training/courses/essential-workplace-training /courses/ferpa /training/courses/ferpa /courses/free-ai-security-awareness-training /training/courses/free-ai-security /courses/gdpr /training/courses/gdpr /courses/hazard-communication-hazcom /training/courses/hazcom /courses/hb300 /training/courses/texas-hb300 /courses/hipaa /training/courses/standard-hipaa /courses/hipaa-for-compliance-officers /training/courses/hipaa-compliance-officers /courses/hipaa-for-operators /training/courses/hipaa-operators /courses/hipaa-for-saas-health-tech-vendors /training/courses/hipaa-saas /courses/medicare-fraud-waste-abuse-training /training/courses/medicare-medicaid-fraud /courses/new-york-shield-act /training/courses/ny-shield-act /courses/pci /training/courses/pci /courses/stark-law-and-the-anti-kickback-statute /training/courses/stark-law — /training — /training/hipaa — /training/hipaa-certifications — /training/security-awareness — /training/courses/hipaa-chiropractors — /training/courses/hipaa-privacy-associate — /training/courses/hipaa-officer-certification Blog102 /blog/12-cybersecurity-strategies-to-implement-this-year /blog/12-cybersecurity-strategies-to-implement-this-year /blog/2-9-billion-with-a-b-ssns-compromised-in-massive-data-breach--heres-what-you-should-do-next /blog/2-9-billion-with-a-b-ssns-compromised-in-massive-data-breach--heres-what-you-should-do-next /blog/3-keys-to-compliance-success /blog/3-keys-to-compliance-success /blog/55-million-dollar-fine /blog/55-million-dollar-fine /blog/a-step-by-step-guide-to-achieving-and-maintaining-hipaa-compliance /blog/a-step-by-step-guide-to-achieving-and-maintaining-hipaa-compliance /blog/ai-governance-what-is-it-why-it-matters /blog/ai-governance-what-is-it-why-it-matters /blog/alright-alright-alright-the-texas-data-privacy-and-security-act-tdpsa---what-it-means-for-your-business-and-how-to-comply /blog/alright-alright-alright-the-texas-data-privacy-and-security-act-tdpsa---what-it-means-for-your-business-and-how-to-comply /blog/ambs-call-center-october-2025-client-of-the-month /blog/ambs-call-center-october-2025-client-of-the-month /blog/america-250-built-by-individuals /blog/america-250-built-by-individuals /blog/are-my-employees-a-hipaa-risk-to-my-practice /blog/are-my-employees-a-hipaa-risk-to-my-practice /blog/at-t-data-breach-and-crowdstrike-global-outage-implications-and-precautions-for-your-business /blog/at-t-data-breach-and-crowdstrike-global-outage-implications-and-precautions-for-your-business /blog/avast-ccleaner-malware-infects-2-27m-users-what-to-do /blog/avast-ccleaner-malware-infects-2-27m-users-what-to-do /blog/back-from-break-restarting-compliance-in-practice /blog/back-from-break-restarting-compliance-in-practice /blog/beyond-the-first-year-the-value-of-ongoing-compliance-maintenance /blog/beyond-the-first-year-the-value-of-ongoing-compliance-maintenance /blog/carehive-august-2025-client-of-the-month /blog/carehive-august-2025-client-of-the-month /blog/case-studies-in-hipaa-compliance-lessons-learned /blog/case-studies-in-hipaa-compliance-lessons-learned /blog/colorado-considers-new-privacy-and-data-breach-legislation /blog/colorado-considers-new-privacy-and-data-breach-legislation /blog/compliance-framework /blog/compliance-framework /blog/core-components-of-hipaa-compliance /blog/core-components-of-hipaa-compliance /blog/credit-card-companies-protect-your-data /blog/credit-card-companies-protect-your-data /blog/cybersecurity-news-resources-2-24-22 /blog/cybersecurity-news-resources-2-24-22 /blog/data-is-now-worth-more-than-oil /blog/data-is-now-worth-more-than-oil /blog/dawn-van-buskirk-new-ceo /blog/dawn-van-buskirk-new-ceo /blog/deep-dive-into-hipaa-violations-and-unauthorized-access-in-healthcare-a-balancing-act-of-entertainment-and-education /blog/deep-dive-into-hipaa-violations-and-unauthorized-access-in-healthcare-a-balancing-act-of-entertainment-and-education /blog/ding-a-ling-answering-service-september-2025-client-of-the-month /blog/ding-a-ling-answering-service-september-2025-client-of-the-month /blog/disaster-recovery-plans /blog/disaster-recovery-plans /blog/does-your-it-vendor-even-care /blog/does-your-it-vendor-even-care /blog/dont-get-drilled-by-hipaa-audit /blog/dont-get-drilled-by-hipaa-audit /blog/duck-duck-breach /blog/duck-duck-breach /blog/email-encryption-and-maintaining-hipaa-compliance /blog/email-encryption-and-maintaining-hipaa-compliance /blog/embracing-the-future-of-healthcare-the-role-of-remote-receptionists-in-modern-medical-practices /blog/embracing-the-future-of-healthcare-the-role-of-remote-receptionists-in-modern-medical-practices /blog/emerging-threats-in-cybersecurity-a-february-2024-overview /blog/emerging-threats-in-cybersecurity-a-february-2024-overview /blog/employee-training-beyond-hipaa /blog/employee-training-beyond-hipaa /blog/enhanced-security-risk-assessment-tool-unveiled-by-hhs-to-bolster-ephi-protection /blog/enhanced-security-risk-assessment-tool-unveiled-by-hhs-to-bolster-ephi-protection /blog/equifax-breach-exposes-143-million-people-and-businesses-to-identity-theft /blog/equifax-breach-exposes-143-million-people-and-businesses-to-identity-theft /blog/everyone-loves-gmail-but-is-it-hipaa-compliant /blog/everyone-loves-gmail-but-is-it-hipaa-compliant /blog/five-fraud-trends-to-be-alert-to /blog/five-fraud-trends-to-be-alert-to /blog/founder-led-compliance-protecting-what-youre-building /blog/founder-led-compliance-protecting-what-youre-building /blog/hhs-and-delaware-forge-agreement-to-uphold-disability-rightsi /blog/hhs-and-delaware-forge-agreement-to-uphold-disability-rightsi /blog/hhs-ocrs-337-750-settlement-reinforces-need-for-robust-ephi-security /blog/hhs-ocrs-337-750-settlement-reinforces-need-for-robust-ephi-security /blog/hipaa-2-0-penetration-testing-2026 /blog/hipaa-2-0-penetration-testing-2026 /blog/hipaa-glossary-essential-terms-you-need-to-know /blog/hipaa-glossary-essential-terms-you-need-to-know /blog/how-data-compliance-can-increase-your-revenue /blog/how-data-compliance-can-increase-your-revenue /blog/how-to-implement-an-iso27001-compliant-information-security-management-system /blog/how-to-implement-an-iso27001-compliant-information-security-management-system /blog/i-overheard-my-doctor-say-what /blog/i-overheard-my-doctor-say-what /blog/is-hipaa-training-all-thats-needed /blog/is-hipaa-training-all-thats-needed /blog/iso27001-compliance-practical-tips-and-advice /blog/iso27001-compliance-practical-tips-and-advice /blog/july-2025-client-of-the-month /blog/july-2025-client-of-the-month /blog/june-2025-client-of-the-month /blog/june-2025-client-of-the-month /blog/keeping-your-data-secure-this-holiday-season /blog/keeping-your-data-secure-this-holiday-season /blog/key-elements-of-iso27001-compliance /blog/key-elements-of-iso27001-compliance /blog/leveraging-soc2-compliance-for-business-growth /blog/leveraging-soc2-compliance-for-business-growth /blog/maintaining-soc2-compliance-best-practices /blog/maintaining-soc2-compliance-best-practices /blog/major-upcoming-change-hipaa-security-rule-overhaul /blog/major-upcoming-change-hipaa-security-rule-overhaul /blog/making-passwords-less-painful /blog/making-passwords-less-painful /blog/md-anderson-fined-and-phi-uses-for-research /blog/md-anderson-fined-and-phi-uses-for-research /blog/mobile-phone-encryption-and-hipaa-compliance /blog/mobile-phone-encryption-and-hipaa-compliance /blog/navigating-the-soc2-audit-process-a-comprehensive-guide /blog/navigating-the-soc2-audit-process-a-comprehensive-guide /blog/navigating-the-waters-of-hipaa-compliance-in-the-wake-of-ransomware-attacks /blog/navigating-the-waters-of-hipaa-compliance-in-the-wake-of-ransomware-attacks /blog/new-state-compliance-laws-in-2023 /blog/new-state-compliance-laws-in-2023 /blog/no-https-no-google-customers /blog/no-https-no-google-customers /blog/ocr-audit-letter /blog/ocr-audit-letter /blog/one-year-anniversary /blog/one-year-anniversary /blog/preparing-for-your-next-hipaa-audit-a-guide-for-first-timers-and-returning-businesses /blog/preparing-for-your-next-hipaa-audit-a-guide-for-first-timers-and-returning-businesses /blog/quest-diagnostics-breached-34000-records-stolen /blog/quest-diagnostics-breached-34000-records-stolen /blog/raintech-partnership /blog/raintech-partnership /blog/risk-analysis-mapping-your-data /blog/risk-analysis-mapping-your-data /blog/scary-hipaa-stories /blog/scary-hipaa-stories /blog/should-my-it-vendor-or-cloud-ehr-sign-my-baa /blog/should-my-it-vendor-or-cloud-ehr-sign-my-baa /blog/steps-for-a-new-chiropractor-to-achieve-hipaa-compliance /blog/steps-for-a-new-chiropractor-to-achieve-hipaa-compliance /blog/steps-for-a-new-dpc-doctor-to-achieve-hipaa-compliance /blog/steps-for-a-new-dpc-doctor-to-achieve-hipaa-compliance /blog/strengthening-healthcare-cybersecurity-a-look-at-the-proposed-hipaa-security-rule-updates /blog/strengthening-healthcare-cybersecurity-a-look-at-the-proposed-hipaa-security-rule-updates /blog/take-30-minutes-to-protect-your-legacy-from-ransomware /blog/take-30-minutes-to-protect-your-legacy-from-ransomware /blog/telehealth-and-the-covid19-crisis /blog/telehealth-and-the-covid19-crisis /blog/the-benefits-of-achieving-iso27001-certification /blog/the-benefits-of-achieving-iso27001-certification /blog/the-best-firewall-is-you /blog/the-best-firewall-is-you /blog/the-five-trust-service-criteria-of-soc2 /blog/the-five-trust-service-criteria-of-soc2 /blog/the-growing-risk-of-third-party-vendors /blog/the-growing-risk-of-third-party-vendors /blog/the-potential-consequences-of-hipaa-non-compliance /blog/the-potential-consequences-of-hipaa-non-compliance /blog/the-role-of-the-compliance-officer /blog/the-role-of-the-compliance-officer /blog/the-scary-truth-about-your-role-in-the-opioid-crisis /blog/the-scary-truth-about-your-role-in-the-opioid-crisis /blog/this-is-a-post-title-5 /blog/small-practice-get-your-race-car /blog/trusted-compliance-company-prohipaa-announces-major-rebranding-changing-to-vanrein-compliance /blog/trusted-compliance-company-prohipaa-announces-major-rebranding-changing-to-vanrein-compliance /blog/unlocking-security-a-deep-dive-into-soc-2-compliance /blog/unlocking-security-a-deep-dive-into-soc-2-compliance /blog/unlocking-success-the-crucial-role-of-understanding-your-vendors /blog/unlocking-success-the-crucial-role-of-understanding-your-vendors /blog/vanrein-compliance-and-trustcloud-join-forces-to-enhance-compliance-solutions /blog/vanrein-compliance-and-trustcloud-join-forces-to-enhance-compliance-solutions /blog/vanrein-helps-medical-cannabis-platform-veriheal /blog/vanrein-helps-medical-cannabis-platform-veriheal /blog/what-is-a-business-associate /blog/what-is-a-business-associate /blog/what-is-a-hipaa-risk-assessment /blog/what-is-a-hipaa-risk-assessment /blog/what-is-hipaa-and-why-is-it-important /blog/what-is-hipaa-and-why-is-it-important /blog/what-is-hipaa-and-why-it-matters-for-your-business /blog/what-is-hipaa-and-why-it-matters-for-your-business /blog/what-is-iso27001-and-why-it-matters-for-your-business /blog/what-is-iso27001-and-why-it-matters-for-your-business /blog/what-is-soc2-and-why-it-matters-for-your-business /blog/what-is-soc2-and-why-it-matters-for-your-business /blog/what-is-the-california-consumer-privacy-act /blog/what-is-the-california-consumer-privacy-act /blog/what-is-the-hitech-act-and-does-it-impact-you /blog/what-is-the-hitech-act-and-does-it-impact-you /blog/what-to-know-about-texas-hb300 /blog/what-to-know-about-texas-hb300 /blog/what-you-need-to-know-about-hipaa /blog/what-you-need-to-know-about-hipaa /blog/why-do-hackers-want-to-steal-phi /blog/why-do-hackers-want-to-steal-phi /blog/why-do-i-need-policies-and-procedures-for-hipaa-compliance /blog/why-do-i-need-policies-and-procedures-for-hipaa-compliance /blog/why-ocrs-latest-bulletin-on-facility-access-controls-matters-to-you /blog/why-ocrs-latest-bulletin-on-facility-access-controls-matters-to-you /blog/you-should-update-your-apple-devices-immediately-to-fix-a-major-security-flaw /blog/you-should-update-your-apple-devices-immediately-to-fix-a-major-security-flaw — /blog/ai-security-removed-goes-bad-quickly 