Mac McMillan

Co-Founder and CEO, CynergisTek, Inc.

McMillan is co-founder and CEO of CynergisTek Inc., a firm specializing in information security and regulatory compliance. He has more than 30 years of federal and private sector experience in managing and delivering information security services and is chair of the HIMSS Privacy and Security Steering Committee.

Preparing for OCR Audits: Presented by Mac McMillan of the HIMSS Privacy and Policy Task Force

Presented by Mac McMillan • September 17, 2014

It's hard to believe, but a year has already passed since the deadline for the HIPAA Omnibus Final Rule went into place. Although the language is set, the full impact is still playing out. Recent changes within the Office of Civil Rights (OCR) and its leadership have energized enforcement and changed what...

Securing the Brave New World of Online Patient Information

Presented by Mac McMillan , Tiffany Riley • May 30, 2014

Now that healthcare providers have spent large amounts of money for electronic health records (EHR), how will they keep the data secure from skilled, motivated criminals? A new focus by criminals on compromising EHRs is forcing the healthcare industry to step up their information security. This webinar features...

Termination: When Is It Appropriate?

Mac McMillan • September 17, 2013

Termination of an employee after a breach should be reserved for repeat offenders, individuals who show a total disregard for the rules, those who seek to harm another or the most egregious incidents, security expert Mac McMillan contends.

HIPAA Enforcement: Five Suggestions

Mac McMillan • May 26, 2011

Many have been asking lately if the Department of Health and Human Services' Office for Civil Rights has been effective in carrying out its HIPAA enforcement role. The question is a fair one.

Detecting and Preventing Health Data Breaches

Presented by Mac McMillan , Brian Singer • February 17, 2011

Healthcare data breaches and regulatory mandates have combined to create a new standard for data security that relies heavily on system and user activity awareness. To be compliant and avoid costly breaches, organizations must to improve their ability to predict and see in near real time where incidents are likely to...