Compliance - PDF document

Cisco Compliance Solution for HI P AA Security Rule A t - A - Glance A dd r e s sing Compliance f r om One Infrastructu r e Although achi e ving compliance r equi r es mo r e than just t echnolog y , the net w ork is critical in supporting healthca r e organizations’ compliance stra t e gie s . Cisco offers a Unified Compliance Solution F rame w ork with guidelines that enable y ou t o add r e s s multiple r egula t ory compliance r equi r ements f r om one net w ork infrastructu r e. The Cisco® Compliance Solution for the Health Insurance P ortability and A ccou ntability A ct (HI P AA) is one component of this frame w ork, add r e s sing HI P AA Security Rule t echnical r equi r ements and p r o viding security best practices in a v alida t ed a r chi t ectu r e. L earning F r om Security Rule Findings HI P AA r ecently st r engthened cont r ols f or P r o t ec t ed Health Information (PHI) with the r elease of the HI P AA Omnibus Final Rule. In addition, HI P AA audits conduc t ed in 2012 found that audi t ed organizations the most difficulty complying with the HI P AA Security Rule. Figu r e 1 b r eaks d o wn Securi ty Rule risks in t o nine ca t egorie s , many of which a r e add r e s sed b y the Cisco Compliance Solution for HI P AA. Figu r e 1: Although security only accoun t ed for 28 pe r cent of the audit focu s , 60 pe r cent of audit findings r ela t ed t o securit y . Cisco Compliance Solution for HI P AA Security Rule Cisco Compliance Solution for HIPAA Security Rule is a set of Cisco recommended guidelines for building a network to meet HIPAA Security Rule compliance requirements. It uses Cisco t echnolog y , p r oduct s , and services t o help add r e s s the HI P AA Security Rule, and inc ludes r outing, swi t ching, securit y , wi r ele ss , and data cen t er p r oducts that h av e been assessed b y ex t ernal audi t ors for applicability t o HI P AA compliance. Cisco Services also offers HI P AA security a s se s sment services t o a s se s s t echnical r eadine s s for a HI P AA audit and identify PHI security vulnerabilitie s . Cisco compliance management services p r o vide compliance status upda t es for y our net w ork when changes occu r . Cisco Compliance Solution for HI P AA Security Rule will help y ou t o av oid po t ential security pitfalls during a HI P AA audit. HI P AA Audit Finding Cisco P r oduct/ T echnology In t egrity Cont r ols A S A, IP S , ISE, wi r ele ss , AnyConnect Risk Analysis HI P AA Security A s se s sment Service A cce s s Management ISE, F W , swi t ch segmentation, wi r ele s Security Incident P r ocedu r es I P S , SI O , MSE Contingency Planning/Backup Prime, CSM W orkstation Security AnyConnect, ISE Encryption A S A, AnyConnect Audit Cont r ols & Moni t oring IP S , CMC S , ISE, Why Cisco? Cisc o v alida ted net w or k design s h a v e helped hund reds of customers effecti v ely meet complianc e t echnica l r equi rements. A compr ehensi v e portfolio of solutions enable s y o u to implemen t a v alida ted a rchitecture tha t add r e s se s y ou r net w or k and complianc e r equi rements. Client s a r oun d the w orld r el y o n Cisc o Service s to a s sist them wit h g ov ernance , risk , an d complianc e stra t egie s an d hel p ensu re effecti v e securit y solution s. F or mo r e information about Cisco compliance solution s , visit http://ww w . o. com/go/complianc e . © 2013 Cisco and/or its affilia t e s . All rights r eser v ed. Cisco and the Cisco logo a r e trademarks or r egis t e r ed trademarks of Cisco and/or its affilia t es in the U. S . and other countrie s . T o view a list of Cisco trademark s , go t o this URL: ww w . cisc o. com/go/trademark s . Thi r d - party trademarks mentioned a r e the p r operty of their r especti v e o wner s . The use of the w o r d partner does not imply a partnership r elationship bet w een Cisco and any other compan y . (1110R) DRMKT - 18841 08/13 EDCS - 1278812