This week marks the first anniversary of Schellman's Weekly Read—over the past year, we've sent a Friday email to subscribers containing links to our latest and greatest content. To mark the occasion—fifty-two straight weeks of thought leadership and compliance insight, we've put together the Schellman Weekly Read Top 5 Posts (as determined by most clicks).

Among the growing concerns regarding climate change and corporate responsibility, sustainability reporting has become a valuable tool for businesses to demonstrate their commitment to identifying and managing non-financial risks. While still primarily voluntary in nature, sustainability reports provide additional transparency into a company’s non-financial risks and the measures they take to build resilience into business models and operations.

In the 2018 Marvel film Black Panther, genius inventor Princess Shuri quips that “just because something works does not mean it cannot be improved.” It’s a message the healthcare industry has taken to heart, as it has continuously searched for ways to improve the patient experience.

Now that the deadline for the CISA Secure Software Development form is quickly approaching, organizations are working to ensure they get their attestation in order—that includes FedRAMP Cloud Service Providers (CSPs).

Perhaps believing they’re simply too small for the government to consider, some smaller healthcare providers will choose to either fly under the radar or hope that regulators of the Health Insurance Portability and Accountability Act (HIPAA) won’t notice their lack of correct processes and controls. However, this likely won’t work—in fact, over 55% of HIPAA fines in 2022 were levied against small practices.

For any organization committed to robust cybersecurity hygiene, due diligence isn’t just for your interior systems, operations, facilities, and people—it also requires vetting your service relationships with suppliers to ensure they’re also secure. This is something Microsoft clearly understands, given their rigorous Supplier Security & Privacy Assurance (SSPA) Program they require. And for said suppliers participating in the SSPA Program, there are benefits to further extending your security compliance through HITRUST certification.

TAMPA, Fla. – April 16, 2024 – Schellman, a leading provider of attestation and compliance services and a top 50 CPA firm, is pleased to announce that the firm is now able to support Australia’s Infosec Registered Assessors Program (IRAP) assessments. This milestone marks a significant advancement in the firm’s global capabilities, enabling it to provide comprehensive cybersecurity evaluations tailored to the needs of organizations with an Australian presence.