The Office for Civil Rights at the U.S. Department of Health and Human Services has issued new guidance on how HIPAA-covered entities can provide audio-only telehealth services. The guidance aims to ensure that the use of remote communication technologies for telehealth services complies with HIPAA’s Privacy, Security, and Breach Notification Rules. It also clarifies that audio-only virtual care can be provided without a business associate agreement with the vendor. The goal is to improve public confidence in the protection of health information.

How CISOs Can Successfully Lead Security Transformation in Hybrid Work Environments
CISOs face challenges in hybrid work models, requiring a shift from traditional security to a dynamic approach. They must lead cultural change, engage with leadership,