HIPAA Tip
10/15/08

Finding the Right Path to PCI Compliance, a Complimentary Webcast presented on October 30, 2008 by ecfirst’s Ali Pabrai, CISSP, CSCS. Step through findings of a recent PCI survey to understand what other organizations are doing, examine the very new PCI DSS updates in v1.2, and learn about emerging PCI best practices. Access and authentication management technology is a clear priority in PCI planning. Review auditing, tracking and monitoring requirements to address PCI. To register, please visit www.ecfirst.com.

MANAGED COMPLIANCE SERVICES PROGRAM (MCSP)

The HIPAA Academy is the industry’s first organization to offer a 36-month Managed Compliance Services Program (MCSP) to help you continually manage regulatory requirements. No up-front payment - just pay a fixed-fee each month. We do all the work, with minimal impact to your organization.

Security regualtions such as HIPAA and PCI’s DSS require organizations to maintain compliance with reasonable and appropriate safeguards in several specific areas. Compliance requirements result in critical activities that must be conducted on a regular schedule, typically once a year. On a regular schedule, organizations must:

•        Assess compliance with the requirements  of confidentiality and privacy related regulations

•        Assign responsibility to the security officer who is responsible for coordinating compliance and security initiatives

•        Conduct a comprehensive and thorough risk analysis including vulnerability assessment (penetration testing)

•        Complete a Business Impact Analysis (BIA) for contingency planning and disaster recovery

•        Develop and update security policies and procedures

•        Train all members of the workforce

•        Audit and evaluate the information infrastructure

The ecfirst Managed Compliance Services Program (MCSP) is tailored to meet your compliance requirements.Key features of the ecfirst Managed Compliance Services Program (MCSP) are:

• Bundled outsourced solution for a fixed monthly fee
• Periodic performance of vulnerability assessments, security risk analysis, BIA and contingency planning
• Training, certification and periodic audit and evaluation to keep your organization fully compliant at all times
• Keeping you compliant with the regulations, to help you focus on the business of delivering exceptional services and capabilities to your clients

 Benefits of outsourcing compliance and security include:

• Minimizing productivity losses from unexpected downtime
• Enabling staff to better focus on business-critical tasks and complying with key regulations
• Depth in resource capabilities with trusted knowledge of client infrastructure
• Smooth out volatility in resource demands and costs associated with managing information technology

Contact Eugene.Kunkle@ecfirst.com or call 1.877.899.9974 x20 for a custom MCSP proposal – there is no cost for the proposal and all our prices are fixed-bid – this helps organizations plan and budget for the future. Talk to us and you will see how we take charge of helping your organization meet compliance requirements.