The HIPAA Security Rule was scheduled to be finalized in May 2026. The proposed update eliminates the distinction between required and addressable safeguards, making all security controls mandatory with no
Many organizations build compliance programs as new obligations emerge. A HIPAA audit lands on the calendar, so a HIPAA program gets built. A federal contract comes through, so a FedRAMP
Penetration testing is vital for healthcare organizations to protect patient data, ensure compliance, and prevent costly breaches.
Some healthcare organizations operate with untested quiet confidence. Annual HIPAA training is completed. Policies are documented and signed. IT confirms systems are secure. Years pass without incident. The conclusion feels
At a high level, the difference between a SOC 2 Type I and Type II comes down to design vs. performance. A Type I report is a point-in-time snapshot, showing
You completed a security assessment. The findings report was shared. Your assessor identified vulnerabilities, ranked them by severity, and has given you a prioritized list of what needs to be
Drummond Group, LLC, and Hicomply Ltd. today announced a partnership that gives Hicomply customers access to independent compliance audit and security assessment services. Organizations that have built and managed their
Not long ago, most organizations outside of financial services and healthcare could treat penetration testing as optional. That has changed. The forces pushing organizations toward pen testing in 2026 are
The compliance community has been paying close attention to a recent article detailing allegations that a platform offering a fast, low-cost path to SOC 2 and HIPAA readiness may have
