Paubox blog: HIPAA compliant email made easy

Paubox customers: Paubox Zoom social mixer (November 2024)

Written by Dean Levitt | November 22, 2024

November's Zoom social mixer was a roundtable discussion between Paubox customers covering topics like 2025 IT goals, HITRUST certification, patient surveys, upcoming Paubox Email Suite Premium updates, and Thanksgiving cooking.

 

What happened

November's social mixer followed our standard format - a candid, unmoderated discussion amongst healthcare IT and cybersecurity professionals.

This month, we covered product updates, company culture and cybersecurity, live HIPAA training, certification frameworks like FEDRAMP and HITRUST, and using AI to create phishing emails.

Related: Which federal agencies must use HIPAA compliant email?

 

Our takeaways:

  • Paubox customers are thinking about how to improve their security posture in 2025.
    • With possible tariffs upcoming, non-profit healthcare organizations are purchasing equipment now.
    • Implementing a SOC team in response to increased cyber-attacks.
  • Our customers are automating email surveys to find ways to improve care.
  • We discussed HITRUST certification. Some customers (and Paubox) are certified, while others are just starting the process. The consensus was that HITRUST and FEDRAMP were a heavy lift but worthwhile.
  • Live training with teams has proven effective in avoiding human error breaches.
  • Employees need to know they're not in trouble if they make a mistake. It's better to report the errors.
  • One attendee is using ChatGPT to craft a text phishing campaign centered around holiday sales. He'll report back on the effectiveness.
  • ExecProtect and Geofencing have stopped thousands of phishing emails for one attendee.
    • Include keywords other than just the executive's names.

The bottom line: Paubox customers use a broad range of tools and strategies to keep their email HIPAA compliant, protect their organizations, and find efficiencies. 

See alsoOur playbook for Zoom social mixers

See also: HIPAA Compliant Email: The Definitive Guide