PCI DSS Control Objectives 3 and 4

The Payment Card Industry (PCI) Data Security Standard (DSS) Control Objectives 3 and 4 include requirements that must be met as defined below:

3. Maintain a Vulnerability Management Program

Requirement 5: Use and regularly update anti-virus software
Requirement 6: Develop and maintain secure systems and applications

4. Implement Strong Access Control Measures

Requirement 7: Restrict access to data by business need-to-know
Requirement 8:  Assign a unique ID to each person with computer access
Requirement 9:  Restrict physical access to cardholder data

Control objective #2 is about ensuring that capabilities related preventing malicious software attacks are updated regularly, automatically and applied throughout the organization. Control objective #4 is about identity management. It is about ensuring that only authorized individuals have access to sensitive information on the corporate network.

MANAGED COMPLIANCE SERVICES PROGRAM FROM ECFIRST.COM

Legislation mandates require organizations to maintain compliance with reasonable and appropriate safeguards in several specific areas. Compliance requirements result in critical activities that must be conducted on a regular schedule, typically once a year. On a regular schedule, organizations must:

• Assess compliance with the requirements  of confidentiality and privacy related regulations
• Assign responsibility to the security officer who is responsible for coordinating compliance and security initiatives
• Conduct a comprehensive and thorough risk analysis including vulnerability assessment (penetration testing)
• Complete a Business Impact Analysis (BIA) for contingency planning and disaster recovery
• Develop and update security policies and procedures
• Train all members of the workforce
• Audit and evaluate the information infrastructure

The ecfirst Managed Compliance Services Program is tailored to meet your compliance requirements.Key features of the ecfirst Managed Compliance Services Program are:

• Bundled outsourced solution for a fixed monthly fee
• Periodic performance of vulnerability assessments, security risk analysis, BIA and contingency planning
• Training, certification and periodic audit and evaluation to keep your organization fully compliant at all times
• Keeping you compliant with the regulations, to help you focus on the business of delivering exceptional services and capabilities to your clients

Benefits of outsourcing compliance and security include:

• Minimizing productivity losses from unexpected downtime
• Enabling staff to better focus on business-critical tasks and complying with key regulations
• Depth in resource capabilities with trusted knowledge of client infrastructure
• Smooth out volatility in resource demands and costs associated with managing information technology

Contact Lorna Waggoner, Director of Business Development, at 1.877.899.9974 to learn more about how to manage compliance requirements cost effectively with minimal impact to your internal staff.

For more information visit www.aha-solutions.org , contact Lorna Waggoner at 1.877.899.9974 x17 or visit www.HIPAAAcademy.net

HIPAA Tip

COMPLIMENTARY 2-DAY CHP PROGRAM DELIVERED AT YOUR SITE

Get HIPAA certified at your site. For a complimentary 2-day Certified HIPAA Professional (CHP) program delivered at your site, please contact Lorna Waggoner at 1.877.899.9974 x17 or visit www.HIPAAAcademy.net . Hundreds of client testimonials are available for your reference at www.HIPAAAcademy.Net . Clients include U.S. Department of Veterans Affairs, Air Force, Homeland Security, several State agencies and hundreds of hospitals including Aultman, Northwest Community and many others. Only qualified organizations will be considered. Session will be confirmed after review by the HIPAA Academy.  Certain terms and conditions apply. 

IDENTITY AND ACCESS MANAGEMENT ASSESSMENT

Increasingly, organizations are looking to implement some single sign-On (SSO) capability to address challenges related to password management, especially by clinicians and management.

Physicians, nurses and others in your organization are struggling with password management challenges. They are demanding a solution to access all key applications and systems with a single password. Compliance requirements are resulting in organizations reviewing closely their approach for unique identifiers as well as strong passwords and strong authentication. How does your organization implement a solution that saves the time of clinicians and gets you compliant? What is your organization’s strategy to be compliant with HIPAA and PCI DSS requirements? ecfirst can help. Talk to ecfirst for a customized proposal to conduct a comprehensive and thorough assessment of your identity and access management challenges. We will deliver a detailed report that includes a road-map to address how to implement core capabilities to address password management challenges. For details, please contact Ms. Lorna Waggoner, Director of Business Development at 1.877.899.9974 x17 or at Lorna.Waggoner@ecfirst.com .