Monthly Archives: July 2021
The 18 Identifiers Of PHI
In this article I will outline the 18 identifiers of Protected Health Information also known as PHI. Under the Health Insurance Portability and Accountability Act, known simply as HIPAA, PHI is any information (identifiers) about health care, health status, or payment for health care that can be linked to a specific individual.
THE 18 IDENTIFIERS
- Names
- All geographical subdivisions smaller
than a state, including street address,
city, county, precinct, and zip code - All elements of dates (except year) for
dates directly related to an individual
(birthdate, admission date, etc.) - Phone numbers
- Fax numbers
- Email addresses
- Social Security numbers
- Medical record numbers
- Health plan beneficiary numbers
- Account numbers
- Certificate/license numbers
- Vehicle identifiers and serial numbers,
including license plate numbers - Device identifiers and serial numbers
- Web Universal Resource Locators (URLs)
- Internet Protocol (IP) address numbers
- Biometric identifiers, such as fingerprints
and voiceprints - Full face photographic images and any
comparable images - Any other
How To Fix Remote Desktop CredSSP Encryption Oracle Error
In a few steps I will show you how to fix the remote desktop CredSSP encryption oracle error. CredSSP is an authentication provider which processes authentication requests for other applications; any application which depends on CredSSP for authentication may be vulnerable to an attack. An update released by Microsoft (KB 4093492)on May 8, 2018, for Windows 10 Operation System was targeted to change the default settings CredSSP from Vulnerable to Mitigated.
However, after patching this caused an issue where the patched clients were blocked from communicating with unpatched servers over RDP protocols.
Lets Get Started
We will be using group policy settings to make changes described below to rollback the changes to ‘Vulnerable’ state to allow RDP access.
- Open Group Policy Editor, by executing gpedit.msc
- Policy path: Computer Configuration -> Administrative Templates -> System -> Credentials Delegation
- Run gpedit.msc and expand Administrative Templates
- Expand System
- Expand
Physical Security In The Workplace
With so much attention focused on securing networks and preventing phishing and avoiding ransomware attacks, the physical side of security sometimes goes overlooked. Even in the modern-day work environment where seemingly everything has an internet connection, we still must remain vigilant against physical threats to our security!
KEEP THINGS ORGANIZED.
It’s a lot easier to misplace sensitive documents and keycards/badges if your desk/office is a mess.
RESPECT PRIVILEGED ACCESS.
Keep your systems and devices locked when not in use. When accessing secured areas of our building, be sure no unauthorized persons sneak in behind you or are allowed to enter with you.
ALWAYS FOLLOW POLICY.
It’s your responsibility to know and understand our organization’s security policies. If you’re not sure of something or need more information, please ask!
KNOW HOW TO PROPERLY DISPOSE OF SENSITIVE MATERIALS.
Social engineers never hesitate to dive through dumpsters in search of valuable info. Shred … Read the rest
New Password Guidelines
For the longest time, security experts have recommended long, complex, and sometimes random, passwords. Unfortunately, those guidelines create a dilemma for individuals and organizations alike. Of course, the more complexity you add to a password, the harder it is to crack. But a more complex password also means it’s harder to remember. Complexity often fosters frustration, which in turn promotes laziness and tempts people to use the same password for multiple accounts. But there is hope! The National Institute of Standards and Technology (NIST) released a special publication of updated best practices for creating passwords.
Ditch the complexity.
Passwords that feature a bunch of random characters and capitalization no longer get the stamp of approval. Instead, passphrases that feature simplicity, now top the list of recommendations.
For example, the previous guidelines recommended developing a passphrase like, “The dog wants to play fetch.”
- Use a mixture of upper and lowercase letters:
Loading ...