Streamline Audit Control Compliance for HIPAA
HIPAA Defined :
- Audit and monitor system / user activity across the entire network
- Identify and investigate security breaches and suspicious behavior
- Maintain an audit trail of user and network activity
- Assess and contain damage
- Retain and protect log data as evidence
SenSage for HIPAA
SenSage’s HIPAA Analytics Package has the tools you need to ensure that patient health information is secure. With over 120 log adapters from systems such as McKesson, Cerner and Lawson, as well as perimeter devices, applications, operating systems and databases. SenSage ensures that you can collect the essential log data you need. to not only protect data, but demonstrate that protection. Pre-defined correlations and reports help you quickly identify and investigate any suspicious activity. Centralizing and automating these processes will save you time and money while ensuring that you avoid costly penalties and lengthy discovery processes.
A system you can grow with
Collecting all of the log activity critical for complying with HIPSenSage provides a scalable and cost-effective solution that can handle the terabytes of log data required by HIPAA and Medicare. The system consolidates raw activity logs from all sources into a centralized database which facilitates unique correlation across systems to help identify things like insider abuse SenSage provides flexible access to this information at a cost 90% less than a conventional RDBMS system. This data is stored in a format optimized for event logs, combining efficient storage and SenSage can offer you the massive capacity needed to manage volumes of data and provide the necessary visibility into your system and network activity in accordance with the audit control requirements of HIPAA.
The table below displays the types of log adapter and the categories of reports included in SenSage’s HIPAA Analytics Package.
| Report Categories |
Log Adapter Categories |
Firewalls Protecting EPHI/Individual Firewalls
Investigate Users
Activity on EPHI Hosts
Use of System Utilities on EPHI Hosts
Firewalls Protecting EPHI
Hosts with Suspicious Network Activity
Users to Investigate for Unauthorized EPHI Leakage
IDS Activity for EPHI Hosts
Email Activity Summary
Business Critical System Activity
Activity by Application and Line of Business
Web Surfing Activity
Remote Access
Logins to EPHI Hosts
Use of Privilege on EPHI Hosts
Suspicious Extranet Access to EPHI |
Network
System
Security
Web Proxies
Access Control/Identity Management
E-Mail
Patient Management
- Cerner
- Lawson
- McKesson
- Databases
|
|