Help Me With Hipaa


Sinopsis is a collaboration between Kardon Compliance founder, Donna Grindle, and founder, David Sims. Our mission is to share our Privacy and Security knowledge with those who are required to understand, implement, and manage the complex Privacy and Security requirements of HIPAA compliance.Our work with CEs and BAs inspired us to launch the service to provide information about the complex requirements of HIPAA in a relaxed manner without using too much legalese or geek speak. As the podcasts programs progress we will cover topics about that include sorting through the requirements as well as real world examples of the procedures used, both good and bad.Join us as we do our best to create a show where HIPAA and humor collide!


  • 6 Ways To Make Money Online - Ep 352

    22/04/2022 Duración: 38min

    Cybercrime is a booming business. In 2021, the US experienced an unprecedented increase in cyber attacks with criminals making $6.9 billion online. In today’s podcast, we review the FBI’s Internet Crime Report for 2021. More info at

  • 4 Takeaways from Okta Breach? - Ep 351

    15/04/2022 Duración: 46min

    It is crucial for every business to understand the security practices of their vendors. And also to make sure that those vendors are vetting their vendors.  A cyber attack at a link in your supply chain can drastically affect your business. Evidence: the Okta breach. More info at

  • 4 OCR Cases For Us - Ep 350

    08/04/2022 Duración: 44min

    Have you heard the one about three dentists and a psychiatrist walk into... an OCR investigation? OCR has announced their first set of enforcement actions of 2022, and just in time for our 350th episode.  These involve patient right of access and improper disclosure violations. More info at

  • 6 Points from HIPAA Summit - Ep 349

    01/04/2022 Duración: 43min

    Donna made many notes from the HIPAA Summit. Today, she and David will share six of her top picks, including the difference between an incident and a breach, how a “check the box compliance program” is not a privacy and security program, importance of understanding what your vendor’s incident response plans are and more. More info at

  • 3 HIPAA Enforcement Arms - Ep 348

    25/03/2022 Duración: 59min

    If you are a regular listener of the podcast, you know how Donna loves to “HIPAA-geek out” over the National HIPAA Summit each year. This year’s National HIPAA Summit did not disappoint. Today, we discuss a few points made concerning enforcement of HIPAA related cases by three arms of the federal government. More info at

  • One SMBs Cyber Survey - Ep 347

    18/03/2022 Duración: 51min

    Cyber threats are a growing risk that is becoming increasingly difficult to avoid. Small and medium businesses are not immune to these cyber threats. They are a growing business risk. The first step in preventing cyber threats is awareness.  More info at

  • 6 Impacts - 1 Event - Ep 346

    11/03/2022 Duración: 40min

    Security events can have a significant impact on your business. It’s important to understand the magnitude of what’s going on and what the risks are. Having a plan in place to deal with privacy and security events can make it better, but not having one can make it worse.  More info at

  • 3 Harsh Realities - Ep 345

    04/03/2022 Duración: 53min

    The harsh realities of cybersecurity are not always easy to hear, but they are the one thing that we cannot compromise on as they can have a huge impact on our lives. We must remain cyber aware and be vigilant in order to combat cyber threats. More info at

  • Help Me With PriSec - Ep 344

    25/02/2022 Duración: 45min

    Kardon, Help Me With HIPAA and HIPAA for MSPs is hosting the first PriSec Boot Camp in Louisville, KY on Sep 12, 13, 14 and 15. This ain’t yo Momma’s privacy and security. It is a one of a kind event designed for those who need to understand and manage a privacy and security program.  Listen to today’s podcast to learn all about it. More info at

  • 3 Ways Encryption Fails - Ep 343

    18/02/2022 Duración: 46min

    Encryption can give you a false sense of security. Just because your device or your data is encrypted doesn’t mean it is secure.  You have to understand how encryption works in order to understand how it doesn't work. More info at

  • Why Does Website Security Matter? - Ep 342

    11/02/2022 Duración: 40min

    Securing your website is often overlooked in planning discussions and business risk management decisions. Building a website is pretty easy these days, but keep in mind users expect to have a safe online experience too. Just like with social media sites, a lot can go wrong with a forgotten website. More info at

  • 4 Observations for SMBs and MSPs- Ep 341

    04/02/2022 Duración: 56min

    More and more SMBs are turning to MSPs to help secure their networks, protect their assets from cyber attacks and meet compliance obligations.  MSPs are looking to add new services to meet the SMB market demand.  Today, we review a few of our observations for SMBs and MSPs from a recent report on the focus for small businesses in the next few years. More info at

  • Honeypots Get Quick Attention - Ep 340

    28/01/2022 Duración: 43min

    Honeypots are an important tool in the cybersecurity arsenal. They can be used to observe how attackers work and what their activities, intentions and strategies are. This information can help organizations better understand and defend against cyber attacks. More info at

  • 5 Steps For Securing Your Social Media - Ep 339

    21/01/2022 Duración: 42min

    Social media has become a very important part of our lives. It is the easiest way to connect with friends, family and even promote your business. If not secured properly, it can also be an easy way for someone to hack into your account and become “you” or be the spokesperson for your business.  More info at

  • 7 Ways To Screw Up Incident Response - Ep 338

    14/01/2022 Duración: 38min

    A proper incident response plan is one that details your response to a data breach, cyber attack or other event.  Without a proper plan, things can go horribly awry.  In this episode, we discuss the steps to properly respond to a security incident and then give you seven ways you can completely screw it up. More info at

  • Why You Need Asset Inventories - Ep 337

    07/01/2022 Duración: 58min

    The unknown is the most dangerous. It's a saying that should be taken into account when protecting your most valuable asset - your data.  Today we talk about why creating an asset inventory of your hardware, software and data is an important first step to being able to protect it. More info at

  • Annual Predictions Review - Ep 336

    31/12/2021 Duración: 01h06min

    A new year is right around the corner. The good news is 2021 wasn’t as unpredictable as 2020, but 2022 could be tricky to navigate. It’s time for the review of our 2021 predictions and for us to set new ones for 2022.  So, let’s get started. More info at

  • 2021 Blooper Show

    24/12/2021 Duración: 15min

    Well, another year is coming to a close. No one will forget living through 2020.  Then, 2021 said "Hold my beer." As with every year, there were ups and downs. Who knows what we will be in for in 2022. Regardless, we will continue to adjust. Thanks to Bojan and our teams who help make this podcast a success. And special thanks to all our podcast listeners. We appreciate everyone’s continued support of our efforts to educate and entertain. As we do at the end of each year, we let Bojan create a podcast of our bloopers and behind the scenes silliness.  Enjoy his 2021 Blooper Show. It gives us a week off and gives him a chance to get back at us for the whole year of crap. More data privacy and security madness coming your way next year!  Happy Holidays and Happy New Year to you all!

  • 5 More Patient's Rights Cases - Ep 335

    17/12/2021 Duración: 52min

    OCR has released resolutions to five cases in its HIPAA Patient Right of Access Initiative. This brings the total cases to 25 since the initiative began. These cases continue to underscore the importance of this initiative. More info at

  • Secure Your SaaS - Ep 334

    10/12/2021 Duración: 01h11s

    SaaS continues to grow as a popular way to deploy business applications. It is crucial for businesses to understand what data they are storing in their SaaS cloud applications and how to protect it from data breaches. So, listen to us discuss securing your SaaS. More info at

página 3 de 21