If an auditor showed up in your office tomorrow and wanted to examine your file transfer security policies and procedures, how confident are you that your organization would earn high marks?
Take this short quiz and find out.
- Are you still hosting an outdated SFTP or FTP server in the public area of your network (or DMZ)?
- Do trading partners have access to inbound ports within your internal network to drop off or retrieve files?
- Are your administrative security controls granular enough to manage user access to specific files, folders and areas of the network?
- Can you monitor all file transfer activity and maintain detailed audit logs?
- Do employees have easy access to an ad hoc file transfer tool that lets them transfer files of any size, all while generating audit trails?
To find out how auditors expect you answer these questions, don’t miss our next webinar:
Linoma Software’s Chief Architect Bob Luebbe will show you how the GoAnywhere Services secure FTP server can work with GoAnywhere Gateway to keep sensitive data and credentials safely in your internal network and out of the DMZ. He’ll also demonstrate how the two work together to allow you to exchange files with trading partners without opening inbound ports.
Do your homework so you can prepare for a visit from the auditor. Sign up today!
Yet another layer of regulation has been added to the Health Insurance Portability and Accountability Act (HIPAA) that offers even greater protection for healthcare patients’ privacy, while also defining new rights regarding how they can access their health records.
The biggest change is the expansion of HIPAA compliance requirements to include trading partners and third parties who also handle patient data, such as billing companies, contractors, and more. The U.S. Department of Health and Human Services (HHS) reports that these third parties have been responsible for several significant data breaches which is one reason the responsibility for compliance has been extended to this group.
Penalties for violating HIPAA compliance rules will be assessed based on the determined level of negligence, and can go as high as $1.5 million per incident.
Other issues addressed with the latest additions to the HIPAA regulations include more clarity in defining which types of breaches need to be reported, as well as how patients will be allowed to access and interact with their health records electronically.
If you’re concerned about whether your FTP server meets compliance regulations, join us for a webinar on Thursday, Jan. 31 at Noon Central entitled “Get Your FTP Server in Compliance!” You can learn more about the agenda for this webinar here.
For more information about the new HIPAA rules, check out the press release from HHS.