While small & mid-sized businesses are opting to use MSPs (managed service provider) for various operational aspects, using one specifically for security has presented itself as a viable choice. Threats to cybersecurity are both increasing in number and complexity and having an MSP for security purposes proves to be very helpful. Consider the following signs to help your organization decide if you need a Managed Service Provider to strengthen cybersecurity.

Managed Service Provider for Security: “Pesky” Security Alerts

            If you’re guilty of ignoring security alerts because they seem repetitive, hard to understand, or unactionable on your end, you’re not alone. A study reveals that among respondents, 31% claim to letting alerts pass by because they appear to be false positives, while 40% think that the alerts can’t be acted on, or have a definite solution. These alerts would make better sense to security MSPs. Explanations for unfamiliar sets of actions and why alerts seem redundant are what a security-based managed service provider can offer. What’s good about these MSPs is that they will unearth even the smallest of threats. After all, an organization on average executes 2.7 billion security tool-related actions per month, according to the same study. Less than one million of these actions attend to real security threats, not a menial number at all, considering the gravity of threats these days.

Managed Service Provider for Security: Repetitive Mistakes

            Security-based managed service providers will not only help defend you from threats. MSPs specializing in security will also explain what these threats are, what they could do, and what everyone else can do in response. The thing with some companies is that they intercept these threats over and over because they do not realize their repeated mistakes. Managed service providers will assist you in applying new knowledge from past errors to generate better security decisions.

Managed Service Provider for Security: Too Many Solutions

            The more, the merrier? Not necessarily. Having many security solutions do not make your system automatically safe and stable. Some enterprises have up to 20 differing solutions and chances are they don’t work together. Through a security MSP, you can rally these solutions and find ways to let them work harmoniously, so that you avoid generating system overloads, too much data traffic, or even more security threats in the form of disparate processes. Allow security professionals, like managed service providers, to perform better security management for you.

Managed Service Provider for Security: Staying Informed

            Another service of MSPs is to give you precise reporting of how threats were handled. It is the job of managed service providers to keep you in the know of how security tools were used to counteract cybersecurity concerns. Coasting along without knowledge of a newly-resolved threat won’t do for MSPs. Managed service providers giving you cybersecurity assistance will alert you on the dot when a threat is happening, and how it is being intercepted.

Managed Service Provider for Security: Your Boss Says So

            Especially in the age of advanced technology, many CEOs and other company leaders are investing in staying protected against the dangers of the cyber-world. But that’s not enough. It is imperative that CEOs are involved in security means and ways of the company. MSPs rendered for cybersecurity services can assist your company leaders in going through the security structure of the entire enterprise. No need to have substantial knowledge in cybersecurity; managed service providers will make sure that your CEO will have a good glimpse of how things are working.

Managed Service Provider for Security: Conclusion

            More than ever, cybersecurity should be a top IT priority for any organization. In the past years, malicious cybersecurity forces were to blame for wiping out at least $52.4 billion off stock shares value, an average fall of 1.8%. With these threats in mind, security MSPs should be considered as good options to battle the rising threats to IT security. These MSPs are not only equipped with the right tools, but also with expertise in the matter. With managed security providers to handle your cybersecurity, you and your company may shift your focus to other enterprise objectives, and hand the baton to MSPs in handling software updates and security monitoring. Consider security MSPs in assuring safety and future-proofing your organization.

Contact us to learn more about strengthening your cybersecurity with Aperio IT.

ITT Technical Institutes Closed As of September 6, 2016

ITT Educational Services, Inc., announced that it will be discontinuing academic operations at all of its ITT Technical Institutes permanently. They state that they have eliminated the positions of more than 8,000 employees, and refer to “tens of thousands of unexpectedly displaced students [who will need help] with their records and future educational options.”

Specifically in the Sacramento area, this means that the ITT Technical Institute in Rancho Cordova has been shuttered, “…leaving more than 400 students without an immediate option to finish their education.” (Allen Young, Sacramento Business Journal.) The Sacramento area has experienced additional school closures in the recent past, including Heald College in Roseville and Rancho Cordova and three University of Phoenix campuses.

Did ITT Fail to Deliver on Its Educational Promise to Students?

In its press release, ITT claimed that “…federal actions will result in the closure of ITT Technical Institutes without any opportunity to pursue our right to due process.” The press release states that ITT “…exhausted the exploration of alternatives, including transfer of the schools to a non-profit or public institution.” ITT also states that they were not provided with a hearing or an appeal.

However, other sources describe a different situation. Gizmodo’s Technology Editor, Michael Nunez, stated in his article on ITT’s closure that “ITT Tech and other for-profit colleges have been widely criticized for accepting billions of dollars in government loans while failing to provide adequate job training for its students.”

Sanctions Before Closure Spelled the End

Only days before the closure, ITT had been barred from accepting new students who were using federal loans to finance their educations. These sanctions were driven by concerns about ITT’s business and recruiting practices: “ITT Tech… had been facing accusations from its accreditor of chronic financial mismanagement and questionable recruiting tactics. It is also under investigation by more than a dozen state and federal authorities, including the Massachusetts attorney general, the Consumer Financial Protection Bureau and the Securities and Exchange Commission.” (Melissa Korn, Wall Street Journal)

The Future for ITT Students, Including 35,000 Veterans

The future for now-former ITT students is unclear. Although ITT has been legally required to maintain cash reserves to help support students in case of company closure, Gizmodo reports that the company “is not saying how it will use its reserves,” with ITT maintaining that their press release will be their only comment.

Where Can Students Get More Information?

The Department of Education issued a letter from the Secretary of Education to ITT students on September 6, 2016, providing guidance and links to their ITT announcements page. Initially, students face two basic options: discharge of student loans (under some circumstances); or attempting to transfer credits to other institutions.

However, Leada Gore notes on the Alabama website that students may face unexpected difficulties. For example, if a student is in default of student loans at the time of the closure, they may be ineligible for discharge of their loan.

Even more worryingly, “Veterans attending ITT will be covered under the same provisions related to loan discharge. However, veterans cannot be credited for the months of eligibility under G.I. Bill already used while at ITT. As many as 35,000 veterans attend ITT, according to Student Veterans of America.”

`

Figuring out the details of whether your business is in compliance with HIPAA is an ongoing challenge. At our last HIPAA related Lunch & Learn event, several of our attendees were looking for information on how HIPAA will be conducting its latest phase of audits – how businesses will be selected to be audited (particularly business associates), when the different types of audits will be conducted, and more. Here are some of the latest answers from the Health and Human Services Office for Civil Rights

HIPAA Compliance – FAQs and the Audit Protocol

The OCR’s website offers some helpful definitions and answers to frequently asked questions concerning the audit process. A few important highlights include:

• Timing for audits – The Health and Human Services Office for Civil Rights (OCR) began audits for Phase 2 of the HIPAA Audit Program back in March 21, 2016. The OCR states that “Phase 2 is currently underway. Selected covered entities [CE] received notification letters July 11, 2016. Business associate [BA] audits will start in the fall.” The OCR also warns businesses to double check that the emails are not blocked by any spam filters.

• Basis for selecting those who will be audited – The OCR states that for Phase 2, they are “identifying pools of CEs and BAs that represent a wide range of health care providers, health plans, health care clearinghouses, and business associates.” Their plan is to examine a broad spectrum of candidates to allow them to better understand the state of HIPAA compliance across the industry.

As far as BAs go, the OCR will be asking CEs who are being audited “to identify their business associates.” They encourage CEs “to prepare a list of each business associate with contact information so that they are able to respond to this request.”

• Different sets of audits – The OCR’s first set of audits will be desk audits of CEs, followed by a second set of desk audits of BAs. The third set of audits will be onsite, with some desk auditees being subjected to onsite audits. (You can take a look at the OCR 2016 HIPAA Desk Audit Guidance on Selected Protocol Elements for additional details.)

You can also take a look at the actual audit protocol along with some definitions of terms at the OCR’s website. This lengthy table breaks down the audit protocol according to Audit Type, Section, Key Activity, Established Performance Criteria, and the Audit Inquiry.

HIPAA is constantly changing an updating its regulations.? There are still tons of companies that are currently operating without even knowing they need to be HIPAA compliant.? It’s hard to stay on top of the all the changes so if you ever have any questions then please feel free to contact us about any questions you may have regarding HIPAA certification.? You may already be required and could face paying some hefty finds.? You have questions so call us at 916.568.6830 or contact us via form:

CONTACT US!

[contact-form-7 id=”1534″ html_class=”cf7_custom_style_3″]