Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [hipaa]

The tag has no usage guidance.

3
votes
2answers
1k views

Can I remove the external IP from my GKE cluster?

I've just started using Google Kubernetes Engine (GKE) and I love it. I spent some time getting an Internal Load Balancer working so my app has a 10.128.0.0/16 IP. Now I am wondering, can I remove ...
2
votes
2answers
1k views

Client wants to route all my internet traffic through their VPN, but why?

I am currently working with a client in the healthcare sector. Part of the work will involve contact with sensitive patient health information (PHI). The client uses AWS and keeps their sensitive data ...
0
votes
1answer
766 views

Does disk encryption on a hyper-v partition work and is it effective and stable?

I have a new health care IT customer requirement. They're file server is a virtual 2012 R2 running on a Dell PE with 2012 R2 Hyper-V. The Dell PE with 2012 R2 Hyper-V server has two partitions. 1st ...
1
vote
2answers
65 views

Exchange secure email recipient validation

I have a customer that needs to have their email recipients verify their identity before opening an email with sensitive material in it. For example if I send an email to jsmith@domain.com I need ...
11
votes
2answers
6k views

Should I encrypt OS disk with BitLocker for HIPAA compliance

I am looking into hosting a HIPAA compliant web application on Azure VM's. For the database, right now I am leaning towards using a VM with SQL 2014 Standard Edition. Since TDE is not available with ...
6
votes
1answer
5k views

Are GoDaddy dedicated managed servers HIPAA compliant? [closed]

I keep getting the run around from godaddy regarding HIPAA compliance. Does anyone have a researched answer on this matter? We have dedicated 5505 and dedicated server with them and I wanted to know ...
11
votes
2answers
5k views

How to Protect Sensitive (HIPAA) SQL Server Standard Data and Log Files

I am dealing with electronic protected health information (ePHI or PHI) and HIPAA regulations require that only authorized users can access ePHI. Column-level encryption may be of value for some of ...
6
votes
2answers
349 views

Sending HIPAA compliant e-mails

At a small office, my clients' HR department needs to communicate with some vendors regarding HIPAA-covered material. How do most companies deal with securely sending e-mails regarding HIPAA. I ...
3
votes
4answers
1k views

Is STARTTLS sufficient for HIPAA

Is the use of STARTTLS during communication between an internal email server and external recipient sufficient to meet HIPAA guidelines? If so, is it required that TLS be forced?
2
votes
1answer
485 views

What are HIPAA rules concering RPO and RTO for a doctors office?

I am planning system upgrades at several Group Practice doctor offices. I am asking them questions concerning what their RTO (Recovery Time Objective) and RPO (Recovery Point Objective) may be so ...