ABOUT THIS EPISODE
Information security plays a critical role in healthcare compliance, risk management, and organizational resilience. In this episode of Compliance Deconstructed, Jessica Zeff, Lorie Davis, and special guest Joe Wynn, Founder & CEO of Seiso, break down the foundational elements of an effective information security program and explain why protecting sensitive data requires a structured approach that extends beyond technology solutions.
This in-depth conversation explores the importance of conducting comprehensive risk assessments to identify vulnerabilities, evaluate threats, and prioritize security efforts based on potential impact. The hosts also discuss practical safeguards such as multi-factor authentication, data backups, software patching, access controls, and employee training that help healthcare organizations strengthen their security posture and reduce exposure to cybersecurity risks.
Jessica, Lorie, and Joe also address common misconceptions surrounding HIPAA compliance, SOC 2 reports, and security attestations while highlighting emerging concerns related to website tracking technologies and third-party data sharing. After consuming this episode, you’ll gain actionable insights into building a sustainable information security strategy that supports regulatory compliance, protects patient information, and promotes long-term organizational success.
Key Takeaways:
• Risk assessments provide the foundation for identifying security gaps, evaluating threats, and prioritizing remediation efforts across the organization.
• Multi-factor authentication, secure backups, regular software updates, access management, and employee education remain essential components of a strong security program.
• Healthcare organizations should understand that there is no official HIPAA certification and that compliance requires ongoing oversight and accountability.
• SOC 2 reports evaluate security controls and can support broader compliance initiatives when paired with regulatory assessments.
• Website cookies, tracking scripts, and third-party marketing tools can create privacy and compliance risks when organizations do not fully understand how data is collected and shared.
• Information security requires continuous evaluation, process improvement, and cross-functional collaboration to protect sensitive information and maintain regulatory compliance.
Connect with Joe Wynn
Learn more about Healthcare Compliance and discover how Simply Compliance can help your company at simplycomplianceconsulting.com.
