NIST revises healthcare guidance to improve HIPAA Security Rule compliance

The National Institute of Standards and Technology announced an update to its healthcare cybersecurity guidance, placing a greater emphasis on the guidance’s risk management component, including integrating enterprise risk management concepts.

WHY IT MATTERS
The 

 focuses on helping inform the industry about security issues around electronic protected health information, or ePHI, which runs the gamut of patient data…