locations · jackson, mississippi

Mississippi agencies owe ITS a cyber incident report by the next business day. Can your logs back it up?

Government employs more people than any other sector in the Jackson metro, and the state's only academic medical center sits on North State Street. Agencies on the state network must report cyber incidents by the close of the next business day, so knowing which accounts were touched has to be quick.

in short·20-second read

Our Jackson work is with state agencies, health care providers and the utilities and contractors that serve them.

We clean up directories that grew agency by agency, put administrators behind privileged access controls, and connect sign-in and audit logs so an incident report can name the accounts involved. For providers we handle clinical identity and HIPAA access controls. Cohash serves Jackson remotely from Frisco, Texas and travels in for workshops and launches.

Cohash has no office in Mississippi. Our US base is Frisco, Texas, and we work with Jackson organizations remotely, coming in person for discovery workshops, cutovers and launch days.

Ask an engineer facts checked 2026-10-21 · 9 sources
rules
Mississippi breach notification, Miss. Code §75-24-29Mississippi ITS Enterprise Security PolicyHIPAA Security Rule
who and what

Who we work with in Jackson, Mississippi, and the rules they work under

industries
  1. State agencies and boards

    Each agency tends to bring its own directory, its own admin accounts and its own vendor logins. When ITS asks for an incident report the next business day, someone has to find out fast which accounts were used. We consolidate identities, vault administrator credentials and send sign-in events to one place an investigator can search.

  2. Hospitals and clinics

    A teaching hospital with a children's hospital and statewide clinics has residents, nurses, students and outside physicians all reaching the same record system. We tie clinical access to credentialing and rotation schedules, set break-glass rules for emergencies, and review who opened which chart.

  3. Water, power and public works

    Operators running a court-supervised rebuild or a regional grid hire many contractors for field and control systems. We give each contractor a named account with an end date, route remote access to SCADA and billing systems through a recorded gateway, and remove vendor accounts when the work order closes.

  4. Medicaid and public program data

    Programs that pay providers and track eligibility pull data from several agencies and contractors. We build integration pipelines with lineage and role-based access, so analysts see the fields they need and member identifiers stay masked elsewhere.

regulations
  1. Mississippi breach notification, Miss. Code §75-24-29 ↗

    Businesses holding personal information on Mississippi residents must notify them without unreasonable delay after investigating a breach, unless they reasonably decide harm is unlikely. Vendors notify the data owner as soon as practicable. The Attorney General enforces it as an unfair trade practice, with no private right of action.

  2. Mississippi ITS Enterprise Security Policy ↗

    Sets the minimum requirements for protecting state data, last revised 1 July 2025. Related standards cover agency firewalls on the enterprise state network and security awareness training, and the incident guidelines set the next-business-day report.

  3. HIPAA Security Rule ↗

    Covers Jackson's hospitals, clinics and health plans and their business associates. Access control, unique user identification and audit controls for systems with ePHI are the identity pieces we work on.

01Does Mississippi have a consumer privacy law like Texas or Virginia?

Not as of October 2026. A consumer data privacy bill, SB 2015, died in committee in February 2026, and earlier attempts also failed, so the breach statute at §75-24-29 is the main state rule for most private businesses. HIPAA and sector rules still apply on top of it.

02Can you help our agency meet the next-business-day incident report?

The report itself is your agency's to file. We make the facts available in time. Sign-in logs, privileged session records and account change history go to one searchable place, and we write a short runbook for pulling them during the first hours of an incident.

03Is there a fixed deadline for telling Mississippi residents about a breach?

The statute does not set a day count. It asks for notice without unreasonable delay, allowing time to investigate and restore the system, and it allows delay when law enforcement says notice would impede an investigation. Your counsel decides timing, and other states' deadlines can apply to their residents in the same incident.

sources 9 sources linked last checked 2026-10-21 content fingerprint 2d3147d7
  1. 01BLS, Jackson MS economy at a glancebls.gov ↗
  2. 02University of Mississippi Medical Centerumc.edu ↗
  3. 03Mississippi ITS, Enterprise Cybersecurity Incident Reportingits.ms.gov ↗
  4. 04Mississippi ITS, Enterprise Security Policies and Standardsits.ms.gov ↗
  5. 05JXN Water, Aboutjxnwater.com ↗
  6. 06Entergy Mississippi, Aboutentergymississippi.com ↗
  7. 07Miss. Code §75-24-29 (FindLaw)codes.findlaw.com ↗
  8. 08FastDemocracy, Mississippi SB 2015 (2026) statusfastdemocracy.com ↗
  9. 09HHS, HIPAA Security Rulehhs.gov ↗
Reviewed by the Cohash team Product names are trademarks of their owners. how we handle facts and data →
next step

Tell us what you're running. We'll tell you what we'd do first.

A 30-minute working session with a senior engineer. No slides.

useful to bring
  • The platform and the version you're on
  • Where you need to get to, and by when
  • What's custom: rules, plugins, integrations
  • Any audit finding or deadline driving it