In 2023, a well-known New York hospital fell victim to a significant ransomware attack, ultimately affecting the personal data of some 670,000 individuals. However, the fallout didn’t end with the initial breach. It took the hospital’s security team more than a year to conclude a thorough investigation into the incident—an extensive process that underscores just […]
As a medical practice owner or manager, complying with HIPAA regulations is crucial for protecting patient data and avoiding hefty fines. The landscape of cybersecurity threats is evolving rapidly—and for the first time in over a decade, HIPAA’s security rules are set for a major update. Here’s what you need to know about the upcoming […]
How CDML Can Help Providers Achieve Compliance In Part 1 of this series, we explored the key technology-related requirements of HIPAA, the NY SHIELD Act, and PCI DSS, as well as their overlapping areas. In this second and final part, we will demonstrate how CDML Computer Services can assist medical providers in New York to […]
A Guide to HIPAA, NY SHIELD Act, and PCI Regulations Medical providers in New York face a complex web of regulatory requirements designed to protect patient information, secure sensitive data, and ensure the integrity of financial transactions. Among these, the Health Insurance Portability and Accountability Act (HIPAA), the New York SHIELD Act, and Payment Card […]
Part 5 of 5: Comprehensive Compliance and Security with CDML With the increasing complexity of cybersecurity threats, achieving and maintaining compliance with 23 NYCRR 500, WISP, PCI DSS, and the NY SHIELD Act is an ongoing challenge for financial firms. From Risk Management to Disaster Recovery (DR) and Incident Response (IR) Plans, each component of […]
Part 4 of 5: Disaster Recovery (DR) and Incident Response (IR) Plans For financial firms, the ability to respond effectively to a cyber incident can make all the difference in safeguarding client data and ensuring continuity. Disaster Recovery (DR) and Incident Response (IR) Plans are critical components of 23 NYCRR 500, PCI DSS, and NY […]
Part 3 of 5: Risk Management, Encryption, and Continuous Monitoring For financial organizations, securing sensitive client data requires more than basic protections. 23 NYCRR 500 mandates proactive and continuous oversight, while PCI DSS requires specific measures to safeguard credit card data for businesses that accept card payments. Together, Risk Management, Encryption, and Continuous Monitoring play […]
Part 2 of 5: The Written Information Security Program (WISP) and Data Access Controls For financial professionals in New York, securing sensitive data isn’t just a best practice; it’s a legal obligation. 23 NYCRR 500, the NY SHIELD Act, and WISP—as defined in the Gramm-Leach-Bliley Act—all require organizations to maintain comprehensive data security protocols. Establishing […]
Part 1 of 5: Topic Overview and Understanding 23 NYCRR 500 Financial organizations in New York—especially smaller firms like CPA offices, insurance brokers, mortgage brokers, financial advisors, credit unions, and other financial service providers—are under increasing pressure to protect client data. As cyber threats grow more sophisticated, state and federal regulations mandate stringent data protection […]
© Copyright 2025 CDML Computer Services, Ltd. All Rights Reserved.
