Reducing Security Risks During Mergers and Acquisitions

When companies with different security cultures and operational practices join together, they may introduce weak links in the environment that become entry points for hackers. This presentation will provide guidance on how to improve security governance for healthcare M&A activities.

Join us to learn how to:

Identify gaps in policy and compliance, including HIPAA, PCI, and other regulatory requirements
Protect sensitive personal information and critical intellectual property
Address the human factor with security awareness and training

Frank Negro

Advisory Consulting
NTT Data Services, Healthcare and Life Sciences Solutions

Bio info: Frank Negro is a member of the NTT Data Services’ Healthcare and Life Sciences Advisory Consulting group. His...

Frank Negro is a member of the NTT Data Services’ Healthcare and Life Sciences Advisory Consulting group. His group consults on the strategic issues related to healthcare information systems and their environments. This work includes planning for mergers, acquisitions and divestitures, healthcare information security programs, systems selections, regulatory systems compliance, and enterprise data architecture.

Before joining NTT Data Services (then Dell Services) in 2011, Frank had over 35 years of experience in the healthcare information systems field, including hands-on management, leadership and board-level positions in healthcare organizations. He has been a programmer, systems analyst, application development manager, CIO, and regional CIO, and has worked at community hospitals, tertiary care hospitals, regional health systems, and a national not-for-profit health system.

Frank graduated from Rensselaer Polytechnic Institute in 1977 and earned a Certificate in Data Processing from the Institute for the Certification of Computer Professionals in 1986. He has been active with local and regional IT and planning groups, served on the boards of a home health care agency and a regional HIE, and has long been an active volunteer in his community.

Miriam Levenstein, CISSP, CISM, CISA, PCI-QSA

Senior Consultant, Professional Services
NTT Security

Bio info: With more than 20 years of experience in information systems and security, Miriam guides organizations to protect...

With more than 20 years of experience in information systems and security, Miriam guides organizations to protect critical systems and sensitive data. She has in-depth knowledge of risk management and control frameworks. She leads network and enterprise information security assessments for HIPAA, NIST, PCI and other regulatory standards. Her expertise in security and privacy has empowered organizations to build strong security and data privacy programs. She has presented on "Security in Mergers and Acquisitions" at Bsides Austin (2018) and the Dark Reading INsecurity Conference (2017).