The tag has no usage guidance.

learn more… | top users | synonyms

10
votes
2answers
4k views

How to Protect Sensitive (HIPAA) SQL Server Standard Data and Log Files

I am dealing with electronic protected health information (ePHI or PHI) and HIPAA regulations require that only authorized users can access ePHI. Column-level encryption may be of value for some of ...
9
votes
2answers
4k views

Should I encrypt OS disk with BitLocker for HIPAA compliance

I am looking into hosting a HIPAA compliant web application on Azure VM's. For the database, right now I am leaning towards using a VM with SQL 2014 Standard Edition. Since TDE is not available with ...
6
votes
1answer
4k views

Are GoDaddy dedicated managed servers HIPAA compliant? [closed]

I keep getting the run around from godaddy regarding HIPAA compliance. Does anyone have a researched answer on this matter? We have dedicated 5505 and dedicated server with them and I wanted to know ...
6
votes
2answers
322 views

Sending HIPAA compliant e-mails

At a small office, my clients' HR department needs to communicate with some vendors regarding HIPAA-covered material. How do most companies deal with securely sending e-mails regarding HIPAA. I ...
3
votes
4answers
1k views

Is STARTTLS sufficient for HIPAA

Is the use of STARTTLS during communication between an internal email server and external recipient sufficient to meet HIPAA guidelines? If so, is it required that TLS be forced?
2
votes
1answer
376 views

What are HIPAA rules concering RPO and RTO for a doctors office?

I am planning system upgrades at several Group Practice doctor offices. I am asking them questions concerning what their RTO (Recovery Time Objective) and RPO (Recovery Point Objective) may be so ...
1
vote
2answers
44 views

Exchange secure email recipient validation

I have a customer that needs to have their email recipients verify their identity before opening an email with sensitive material in it. For example if I send an email to jsmith@domain.com I need ...