SMB Security Makes Progress BUT - Ep 579

Small businesses are making progress on cybersecurity, and that’s worth celebrating. But are they actually as prepared as they think they are? In this episode, Donna and David dig into the 2026 Small Business Cybersecurity Awareness and Practices Survey and the gap between confidence and readiness. From MFA and backups to incident response, testing, documentation, and the rapidly changing risks of AI, they discuss why putting security tools in place is only the beginning. Real security means knowing what’s working, verifying it, and being able to prove it.

More info at HelpMeWithHIPAA.com/579

Check out the episode!

The Risk Analysis Reality Check - A Screwdriver Is Not a Hammer - Ep 578

There is no shortage of tools, scans, checklists, and reports that promise to help with cybersecurity, but calling something a risk analysis does not magically make it one. This episode takes a hard look at what OCR keeps saying about Security Risk Analysis, why incomplete SRAs continue to show up in enforcement actions, and why understanding your actual environment still matters more than simply checking the right boxes.

More info at HelpMeWithHIPAA.com/576

Check out the episode!

Don't Make It Easy for Them - Ep 577

Every October, the National Cybersecurity Alliance uses Cybersecurity Awareness Month to remind us how to stay safer online, and this year’s message is beautifully simple: don’t make it easy for the criminals. They’re looking for weak passwords, missing MFA, unpatched software, and people who click before they think. In other words, they’re rattling digital doorknobs to see which ones open. This episode takes a look at this year’s campaign and the real-world cybercriminals being used to show why basic cyber hygiene still matters. You don’t have to become a cybersecurity genius. You just need to practice a few basic security habits to keep you from becoming the easiest target on the block.

More info at HelpMeWithHIPAA.com/577

Check out the episode!

Unmasking the Middleman - When Trust Is the Bait - Ep 576

Remember when spotting a phishing scam meant looking for terrible grammar, a suspicious link, and maybe a Nigerian prince having a bad week? Those were simpler times. Today’s attackers can sound like your IT department, use tools you already trust, and even walk you through legitimate-looking security steps. The scams have gotten much better at looking trustworthy, which means the old security awareness rules need an upgrade. When urgency, anxiety, or pressure shows up, slowing down and verifying may be your best defense.

More info at HelpMeWithHIPAA.com/576

Check out the episode!