by Mark Shaw
When it comes to technology the outlook for 2025 is split between compliance and AI utilization. What do we mean by this? We mean if you are in a HIPPA (Medical Records) medical records or in any line of contracting for the federal government (CMMC) you will be impacted by some new regulations on your business. You may not even be aware of them.
For example, passed in the final hours of 2024, companies that fall under the HIPPA guidelines are now required to do two more things to protect their patient data. One they must have their computer systems scanned for vulnerabilities every quarter. This means four times a year you are expected to have a complete scan of your system to understand the current state of your IT health. Secondly you are expected to do annual penetration testing. This is where an outside firm tries to access your systems and data without being given permission. Once completed this report is shared with you and your technology provider to give a list of recommendations on how to remediate any shortcomings.
Interestingly HIPPA was created in 1995 and to date there has been very little “teeth” in the law and many practices are simply just saying “It is not for me, I’m too small, too specialized, not important enough, don’t have enough data to report on” We see this quite regularly. Medical firms are focused on their main jobs and not the technology side.
This is expected to no longer be the case. The new guidelines are letting regulators to get tougher on everyone. If you are not considering this and you have a medical practice, you should consider talking to your technology provider today to ensure you meet the requirements.
If you are in any industry touched by federal government, from a direct contractor for services, manufacturing for them or even being janitorial services with clients in the government space, you are being forced to adopt stronger guidelines and comply with the new CMMC rules.
Cybersecurity Maturity Model Certification (CMMC) 2.0 program is a set of requirements that contractors must meet to protect sensitive information for the Department of Defense (DoD). The program is designed to protect the Defense Industrial Base (DIB) from cyberattacks. This is being rolled out through the entire supply chain.
This is a lot to digest for a business and it’s here and it may apply to you. Work with your IT firm to find out, if they are not sure, find a new IT firm. Your business is too important.
When we speak of utilization, we are talking about business objectives to increase your organizations productivity. Businesses of all size have large investments into technology. Your IT is critical to your business, you cannot run without it. BUT are you using it to maximize the costs you have incurred to put it in place?
This is the year that businesses get serious about using technology to solve problems. From AI to workflows, your business will need to get the best out of the business tools you are currently using. If you think Microsoft 365 is just email, you are being left behind. If your technology company isn’t helping you leverage the power of tools like these your company is at risk.
The current philosophy is if you are not using AI to better run your business, you won’t be replaced by a fancy AI, but you will be replaced by a company using it. AI is being built into everything from helping you write emails, to producing marketing materials and even helping us better interact with our customers.
Don’t be left behind this year! Know the compliance rules in your industry and leverage your technology to produce a better experience for customers.