Yolanda Baker, Yoga Business Owner, RYT, MR

Maine - Paid Family & Medical Leave (PFML) Deadline April 30 is the Deadline for Employers to Register, Submit Wage Reports & Premiums PFML portal is the online system for employers to file their quarterly wage reports and remit quarterly premium contributions. The portal also allows self-employed individuals and tribal governments to elect coverage. Any employer with at least one Maine-based employee must have begun payroll withholdings January 1, 2025. More details are provided by Maine's Department of Labor: https://lnkd.in/eKsC8st7 Compliance & Risks keeps you up to date on all matters relating to US state level Labor & Employment issues!

8

Hidden operational risks in payroll, benefits administration, and compliance systems don't announce themselves until something breaks. Long Island business owners need to identify these quiet risks before they create expensive failures.

2

The Human Cost of Healthcare Cybersecurity: A Story Worth Remembering 💝 October is Breast Cancer Awareness Month. It's important to reflect on how cybersecurity protects the dignity and privacy of patients during their most vulnerable moments. In February 2023, Lehigh Valley Health Network experienced a ransomware attack by a threat group utilizing the BlackCat family of ransomware. The cyber attack affected over 134,000 patients. When the Lehigh Valley Health Network refused to pay the ransom, the group's response was diabolical. The cybercriminals released hundreds of patients' private breast cancer photos. Behind every data breach statistic is a real person. In this case, many were cancer patients. They trusted their healthcare providers with their most private images and documentation necessary for their medical care and recovery. That trust was violated. Not by their caregivers, but by criminals who saw an opportunity to exploit vulnerability for profit. Cybersecurity isn't just about protecting data, it's about protecting people during their most vulnerable moments. Every healthcare organization, no matter their size, deserves robust protection. As we observe Breast Cancer Awareness Month, let's commit to ensuring that patients can trust their medical providers to keep them safe both in their treatment and in their privacy. Secure Compliance Solutions believes that every patient deserves security during their most vulnerable moments. Follow us on LinkedIn for insights on protecting what matters most and visit us at https://hubs.la/Q03MY0l00 to learn how we help healthcare organizations safeguard patient trust. #breastcancerawareness #cybersecurity #HIPAA

4

𝗦𝘂𝗳𝗳𝗼𝗹𝗸 𝗹𝗲𝗮𝗱𝘀 𝘄𝗶𝘁𝗵 𝟭𝟲𝟯 𝗳𝗶𝗻𝗱𝗶𝗻𝗴𝘀. 𝗡𝗮𝘀𝘀𝗮𝘂 𝗰𝗹𝗼𝘀𝗲 𝗯𝗲𝗵𝗶𝗻𝗱 𝗮𝘁 𝟭𝟰𝟳. 𝗧𝗵𝗲𝘀𝗲 𝘁𝘄𝗼 𝗟𝗼𝗻𝗴 𝗜𝘀𝗹𝗮𝗻𝗱 𝗰𝗼𝘂𝗻𝘁𝗶𝗲𝘀 𝗿𝗲𝗽𝗿𝗲𝘀𝗲𝗻𝘁 𝗼𝘃𝗲𝗿 𝟮𝟬% 𝗼𝗳 𝗮𝗹𝗹 𝗢𝗦𝗖 𝗮𝘂𝗱𝗶𝘁 𝗳𝗶𝗻𝗱𝗶𝗻𝗴𝘀 𝘀𝘁𝗮𝘁𝗲𝘄𝗶𝗱𝗲. districtops.org Data: NYS Office of the State Comptroller audit reports #K12Finance #NYSComptroller #PublicAccountability #InternalControls #OSCAudit #DistrictOps Erie and Monroe follow with 111 and 105 respectively. Western NY's largest districts showing significant control gaps. The pattern is clear across high-enrollment counties. Large districts generate more transactions. More transactions create more failure points. Without systematic controls, volume becomes the enemy. Every purchase order, payroll run, and budget transfer needs the same enforcement layer. Size amplifies control weaknesses. 📊

1

Missing policy endorsements, expired certificates, ERISA plan document gaps, and ACA calculation errors create business interruption risk. Long Island employers need compliance reviews before gaps stop operations.

6

To become ISO 42001 certified, organizations must navigate a defined, multi-stage process from early advisory work and scoping through design, implementation, and formal audit. Without a clear roadmap in place, teams often face implementation rework, stakeholder misalignment, and certification delays. In this co-authored article, Joe Sigman, Manager of AI Assessments and ISO Certification Services at Schellman, and Sawyer Miller, Director of Advisory and Assurance at risk3sixty, provide step-by-step guidance to walk you through the ISO 42001 certification process, outlining what to expect at each phase, what auditors will look for, and how to prepare your organization for a smooth, successful certification. Tap the image below to learn more: https://hubs.ly/Q03WGkB-0

30

The state of Rhode Island publicly released the results of a third-party analysis of the 2024 RIBridges cyberattack and data breach at a press conference with Rhode Island Governor Dan McKee and Chief Digital Officer Brian Tardiff. Cybersecurity company CrowdStrike conducted the analysis, which revealed the five-month timeline of the breach and a more accurate number of impacted individuals -- approximately 644,401 people. RIBridges is a system run by Deloitte that the state of Rhode Island uses to administer important social services benefits like health insurance, food stamps and the Child Care Assistance Program. As previously reported, Deloitte informed the state of a potential security threat to RIBridges on Dec. 5, 2024, stating that there was a high probability that a cyberthreat actor had obtained files containing sensitive information. The Brain Cipher cyberthreat group later took responsibility for the hack. The state took RIBridges temporarily offline and later sent notification letters to nearly 650,000 individuals. The newly released third-party analysis provided clarity on how the cyberthreat actor gained access to the RIBridges environment and how it performed data access, staging and exfiltration activities on 28 RIBridges systems. Reviewing post-incident analyses of healthcare data breaches can help defenders bolster security efforts. https://lnkd.in/gBJR5kBh

7

Cybercriminals hope that you will gloss over the gaps.  They are counting on: -Password reuse or sharing  -Tools left unchecked or misconfigured  -The belief “We are too small to be a target”  -A lack of security during off hours To fight back: -Enforce strong, unique passwords + 2FA everywhere  -Patch & audit systems regularly  -Test threat response during nights & weekends  -Assume everyone is a potential target This Cybersecurity Awareness Month, do not just talk security, practice it daily. https://lnkd.in/evcmaJPR #CybersecurityAwarenessMonth #CyberSecurity #OnlineSafety #BusinessSecurity 

3