Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic & Clinical Health Act (HITECH)
NNT Change Tracker™ Gen7 R2 for HIPAA: Non-Stop HIPAA Compliance
As with other security standards, NNT Change Tracker Enterprise provides a keystone for any cyber defense strategy. Device Hardening and Vulnerability Management is at the core, but with critical operational processes such as Change Management comprehensively covered alongside Host Intrusion Detection capabilities, Change Tracker offers an easy to use but fully featured security and compliance solution.
'Out of the Box' HIPAA compliance reports are provided, based on both CIS and NIST 800-53 recommendations. These hardened build standards can then be tailored to your specific healthcare and ePHI systems to ensure access rights and audit trails are provisioned correctly.
HIPAA - HITECH Background
Electronic Personal Health Information (PHI) records are at risk of theft or exposure just like any other data stored in computer systems. HIPAA and the subsequent HITECH act mandate the responsibility to protect the confidentiality of health information.
Did you know? In December of 2011, DHS named the State Dept. CISO as the director of the National Cybersecurity Division, with the mandate to bring about the same type and level of risk reduction across the government and the critical infrastructure as he had led at the State Department. Prior to this appointment, in 2009, the U.S. Department of State validated the consensus controls by determining whether the controls covered the 3,085 attacks it had experienced in FY 2009. In a presentation to the Intelligence Community, the State Department CISO reported remarkable alignment of the CIS consensus controls and the State Department actual attacks. He also launched a program to implement automated capabilities to enforce the key controls and provide daily mitigation status information to every system administrator across 24 time zones in which the State Department operates. With a very rapid achievement of a more than 88% reduction in vulnerability-based risk across 85,000 systems, the State Department's program became a model for large government and private sector organizations.
- Premera Blue Cross Agrees to Pay $10 Million to States over Data Breach
- Data Breach May Have Exposed Nearly 12 Million Quest Diagnostics Patients
- Study Finds Healthcare Orgs Failing on Cybersecurity Hygiene
- U.S. Attorneys General File First Multi-State HIPAA Related Lawsuit
- All HIPAA, HITECH Blog Posts
- HIPAA-HITECH Security Rule: Non-Stop Compliance and Continuous Breach Detection is Prescribed
- The HITECH Act - the Teeth and Claws of HIPAA
- All HIPAA, HITECH White Papers