24. Hoala Greevy "As plain common sense in 2020, have multi-factor authentication for your accounts, especially your email account."

Hoala: Yes, I think so. Virtual is just the way the world is heading right now. We might do this again next year as well, regardless of what happens with COVID. 

We found we're able to book a lot more high caliber talent. Not to say last year's conference was less caliber; we just got more of it this year. They don't have to travel to San Francisco to be a part of it. That's been an unexpected benefit for us.

Hoala: Sure. We have a domain name for it. So it's PauboxSECURE.com.

You can register for your free ticket or upgrade to a paid ticket for $79. We also have vendor sponsorships as well.

HITRUST is our lead vendor lead promoter this year as they were last year, and we are very thankful to have them on board.

Hoala: We see a common trend that a HIPAA violation gets reported, whether that's an email breach or a stolen laptop. What ensues is a multi-year investigation by the HHS, the U.S. Department of Health and Human Services. At least two to three years later, sometimes longer, there's a fine that gets issued. Frequently the penalty is a result of other things they find out during the investigation. 

We've seen three characteristics of these fines. It'll start with an initial breach. Then when they dig in, they find things like: was a risk analysis conducted for your business? Frequently, no. Were there implemented and documented HIPAA security policies and procedures? Frequently, no. Was there ongoing security awareness training for your workforce? 

In the case of a small provider, it was a seven-year investigation, and they failed all three. So, they had to agree to a $25,000 fine. That's a recurring trend I see when I read up on people who pay HIPAA fines. 

You have ongoing phishing campaigns still working because we all know that healthcare records are worth more in the black market than a credit card. 

We have phishing and ransomware continuing to make the headlines and network breaches, as you saw in the case of Imperium Health last month, which was covered in this month's HIPAA Breach Report.

Hoala: The two big players in the cloud email provider space are, of course, Microsoft's Microsoft 365, formerly known as Office 365, and Google Workspace. We've seen firsthand evidence that the email filters that are enabled by default with the services are not enough. You really want to think hard about having an additional layer in front of those email providers to provide that extra filtering for you. 

One of the things we built last year, called ExecProtect, provides robust protection against display name spoofing attacks, which are many of the attacks being perpetrated right now. 

As plain common sense in 2020, have multi-factor authentication for your accounts, especially your email account. That's a fundamental thing you should be enabling for your entire workforce. Even if your account is compromised, you still need to have your phone or an SMS text to log into the account. Two factors authentication has become table stakes in 2020.

Hoala: Yes! Punahou had another solution that they were using that involved a lot of friction. It was also very easy to turn off. They were looking for something more seamless, especially for the receiving party to actually read the secure message. So, we worked to flip them over from the other solution, which was Virtru, to our solution and provide enterprise-wide email encryption for their outbound mail for all of their staff and faculty. We had a nice smooth transition with them, and we're thrilled to have them as customers. 

And yes, Barack Obama did go to Punahou as did Steve Case, co-founder of AOL, and Pierre Omidyar, co-founder of eBay. So some heavyweights there! 

My alma mater, McKinley, had Senator Danny Inouye, The Rock, Duke Kahanamoku, Governor Ariyoshi, to name a few. I want to make a plug about fire on water; we also have some well-known people.

Hoala: That's right.

Hoala: Aloha!