Mr. Severino made the remark at the “Safeguarding Health Information” conference, hosted by OCR and the National Institute of Standards and Technology in Washington, D.C., Sept. 5 to Sept. 6. He added he hasn’t selected a particular focus area within information security.
“It wouldn’t be the best tactic to say what we’re looking for, but I think coming into this job, I’ve gotten up to speed on HIPAA, and as the threats evolve, we have to evolve in how we approach it — and we have to be smart about who we target,” he said.
“At most I will say the big, juicy case is going to be my priority and the methods for us finding it — stay tuned,” he continued, adding all healthcare entities, regardless of size, should remain vigilant.
More articles on cybersecurity:
20k patients affected after Delaware oncology, hematology group hit with ransomware
IRS to businesses: Beware phishing scams targeting employee W-2s