Webinar Description
Key Takeaways
- Focuses on building a defensible evidence file for cyber insurers, auditors, and OCR compliance reviews
- Covers risk assessment requirements, security awareness documentation, and email security controls
- Addresses emerging risks from AI tools in healthcare environments
- Designed for healthcare organizations preparing for insurance applications, renewals, and regulatory scrutiny
About the Event
This webinar brings together Paul Murphy of Black Talon Security, Jody Loyd of Cornerstone Licensing, and Dawn Halpin of Paubox to examine the documentation and controls healthcare organizations need to demonstrate an effective security program. The session addresses a common challenge: security evidence spread across multiple tools, outdated risk assessments, and training records that may not satisfy external reviewers.
Security Documentation and Compliance Requirements
The webinar examines what constitutes a current, defensible risk assessment and the components of a complete security framework. Presenters will discuss the specific controls cyber insurers evaluate during application and renewal processes, providing guidance on what evidence healthcare organizations should have readily available when questioned about their data security protocols.
Training, Email Security, and Emerging Risks
The session covers how to document security awareness training and phishing tests in ways that satisfy external reviewers. Email security receives particular attention, including how to demonstrate that controls are functioning effectively. The webinar also addresses where AI tools may introduce risk to healthcare practices, a growing concern as these technologies become more prevalent in clinical and administrative workflows.
Who Should Attend
Healthcare compliance officers, IT security managers, practice administrators, and privacy officers responsible for maintaining security documentation and responding to insurer or regulatory inquiries will find this session relevant. The content applies to organizations preparing for cyber insurance renewals or anticipating OCR audits.