Reasonable Threats
In today’s world, just what could be considered a “reasonable” threat? The HIPAA Security rule §164.306(a)(2) directs a covered entity to “Protect against any reasonably anticipated threats or hazards to the security or integrity of such information (electronic protected health information the covered entity creates, receives, maintains, or transmits).

PHI Risks in Email
Today, e-mail has become both an important business tool and a slippery slope when it comes to compliance with HIPAA. HIPAA requires “reasonable and appropriate safeguards” whenever e-mailing Protected Health Information (PHI), but ongoing studies show that healthcare organizations are still in the early stages of adopting effective methods to ensure private information is not transmitted in plain text.

“Sanctionable” Offenses
There are countless pieces of technology that have helped advance the healthcare industry to where it is today, and few would dispute that the computer is at the top of this list. No other device is as heavily and universally relied upon throughout healthcare as this wonderfully complex manipulator of binary code. After all, computers add efficiency and capability in every room – from the waiting room to the boardroom and from the ER to the OR. But as the saying goes, “With great power comes great responsibility.”

Solving the Email Problem
HIPAA compliance is a complex task and no technology services vendor can provide a total solution. However, the right kinds of services can solve specific compliance problems, and competent vendors can appropriately assume some of the burdens of HIPAA compliance.

Security Self-Assessment 1
It is understood today that a tight security framework is essential for any healthcare organization, not only to exist as a functional entity but also to attain HIPAA compliancy. Self-assessments have been utilized as an evaluation tool in various arenas – including our government – for a number of years. A prime example of such an assessment would be our income tax system...

Security Self-Assessment 2
Based on the established scope, the means to evaluate compliance with the security requirements (i.e., a tool) must be developed. This tool can be as simple as a word table or as complex as a web-enabled application with an intelligence engine to calculate results and generate reports automatically...

Van Cleef & Arpels
A few years back, Joe Sykora was on the lookout for an inexpensive virtual private networking (VPN) solution that would satisfy his customers’ demands. More recently, French jeweler Van Cleef & Arpels, with U.S. operations based in New York City, was searching for a similar solution to help safeguard its data in its retail stores throughout the states.

Content Filter
Businesses, schools, and libraries with Internet connections need the ability to control access to objectionable or inappropriate content. Without that control, businesses risk productivity loss, erosion of available bandwidth, and legal liability. The stakes are just as high for schools and libraries, which stand to lose federal funding if they do not provide the content filtering mandated by the Children’s Internet Protection Act (CIPA) of 2000.

HIPAA-Healthcare
This document provides an overview of HIPAA regulations, with particular emphasis on the final Security Rule. It presents SonicWALL’s broad range of cost-effective Internet security solutions, outlining how they can help healthcare organizations meet HIPAA requirements.

Point of Sale
In an increasingly competitive environment, retailers are seeking ways to improve productivity, reduce costs, and generate incremental revenue. IP network and wireless-based applications offer proven solutions. Popular examples include Internet and wireless-enabled POS systems, browser-based supply chain applications, wireless handheld devices, and self-service kiosks. By improving the timeliness and flow of information, these solutions lead to better overall customer satisfaction and increased profitability.

Wireless
Organizations of all sizes are adding wireless technology to their networks at an increasing rate. This explosion of growth has companies adding access points to networks frequently without the necessary wireless security infrastructure in place. Wired Equivalent Privacy (or WEP) is the common entry-level technology used to provide baseline security. At the other end of the spectrum, organizations are integrating firewall and VPN concentrators to each wireless access point to ensure business grade security.