Howard Anderson

Former News Editor, ISMG

Anderson was news editor of Information Security Media Group and founding editor of HealthcareInfoSecurity and DataBreachToday. He has more than 40 years of journalism experience, with a focus on healthcare information technology issues. Before launching HealthcareInfoSecurity, he served as founding editor of Health Data Management magazine, where he worked for 17 years, and he served in leadership roles at several other healthcare magazines and newspapers.

Patient Portals: Addressing Security Issues

Howard Anderson • July 7, 2017

As healthcare organizations build patient portals, they must address user authentication and a variety of other security issues, much like those involved in online banking, says Erik Devine, chief security officer at Riverside Healthcare in Illinois.

What's Wrong With Relying on HIPAA Compliance?

Howard Anderson • July 6, 2017

Healthcare organizations that rely too heavily on HIPAA compliance are coming up short when it comes to security, says Jennings Aske, an attorney who's CISO at New York-Presbyterian. A far better approach, he says, is to rely on the NIST cybersecurity framework or other comprehensive frameworks.

Panel: In the Wake of WannaCry: Creating a Data Security Action Plan that Addresses the Core Elements

Presented by Howard Anderson , Jennings Aske , Erik Devine , Lee Kim • June 1, 2017

In the wake of recent of recent ransomware attacks, such as WannaCry, which have plagued healthcare organizations, in particular, for the last year, what lessons do we have yet to learn? Ransomware attacks are nothing new, and while WannaCry was widespread, it was not sophisticated or stealthy, necessarily. So why did...

How to Engage the Customer in Fraud Prevention

Howard Anderson • April 20, 2017

Many organizations talk about engaging customers to help prevent fraud. Jim Van Dyke, CEO of Futurion, has new ideas for how to best involve customers in fighting fraud in three stages: Prevention, detection and resolution.

Putting Vulnerability Management in Context

Howard Anderson • April 12, 2017

When it comes to vulnerability management, many organizations opt to protect only their most critical security gaps - but, meanwhile, the criminals exploit the secondary vulnerabilities. Kevin Flynn of Skybox Security explains why context is everything in managing vulnerabilities.

FDA Unveils Additional Medical Device Security Guidance

Howard Anderson • December 28, 2016

The Food and Drug Administration has issued a long-awaited final version of guidance for how medical device manufacturers should help maintain the cybersecurity of network-connected devices once they are in use, spelling out key steps to take.

Health Data Security: A Tipping Point

Howard Anderson • December 13, 2016

Has the healthcare sector finally reached a data security tipping point? Dave Summitt, CISO of H. Lee Moffitt Cancer Center, and many of his peers think so. And it's about time.

Data Security Lessons Healthcare Can Learn From DoD

Howard Anderson • November 16, 2016

What information security lessons can the healthcare sector learn from the Department of Defense? Dave Summitt, who has worked in both sectors, shares insights in this video interview.

Second Russian Pleads Guilty in Massive Hacker Attack

Howard Anderson • September 17, 2015

A second Russian has pleaded guilty in connection with the largest U.S. hacking scheme, which compromised more than 160 million payment card numbers. But three other alleged conspirators have yet to be arrested.

Russian Mega-Hacker Pleads Guilty in Largest U.S. Breach

Howard Anderson • September 15, 2015

A Russian hacker who was extradited to the United States earlier this year has admitted his role in the largest hack attack in U.S. history, which resulted in the theft of 160 million payment card numbers. Find out how much time he could spend in prison under his plea agreement.

Mitigating Nation-State Threats

Howard Anderson • June 5, 2015

Rather than taking specific steps to thwart potential cyber-attacks from nation-states, organizations should focus instead on implementing a comprehensive strategy to protect their sensitive data from all threats, says Lance James of Deloitte &Touche.