Single Sign-On

User authentication can compromise the security of sensitive information and systems and cost your organization money and lost productivity. Studies have shown that when users are required to change their passwords often, or remember more than three different passwords, they either record them insecurely, such as a post-it note on their monitor, or forget them and place calls to your Help Desk. Single Sign On (SSO) technology allows users of enterprise, middleware or web applications to log on once with a single authentication action and get access to all authorized resources. Once logged on, authorized employees typically need to access multiple applications. A context management capability provides a unified, integrated view of client information across multiple applications.

For example, take the case of a healthcare environment. This environment is particularly challenging because it requires:

• Caregivers typically share a limited number of workstations
• Applications and information accessed is typically very sensitive and spread across several systems and applications
• Compliance requires audit trails of access to patient information
• Users expect sign-on to complete in seconds (quality of care is impacted by ability to access integrated information about patient across several applications)

Organizations want an easy-to-deploy solution that is secure and efficient and simplifies access to multiple password-protected Windows, Linux, Web and host-based applications. Users who share workstations need to be able to switch in seconds instead of performing a time-consuming full logon/logoff procedure. Typically, caregivers will not logoff and instead inappropriately use another persons account. This is a violation of multiple security regulations and reduces the value of your access logs to zero.

To discuss your SSO initiatives and how ecfirst has implemented SSO solutions to solve access control challenges, schedule time with compliance and security expert Ali Pabrai, CISSP, CSCS. Contact Nazeela.Shokrai@ecfirst.com to schedule a conference call to review your identity and access management priorities and learn what other companies like yours are budgeting, implementing and auditing.

Get your Security Officer, Privacy Officer, and Security Staff members educated today. ATTEND THE CERTIFIED SECURITY COMPLIANCE SPECIALIST (CSCS) PROGRAM IN NEWPORT BEACH, CA ON MAY 14-15, 2008

To attend the only certification program in the industry that addresses PCI DSS, ISO, HIPAA, FISMA, and other information security regulations, please visit the web-site, www.ecfirst.com , and click on the CSCS Program.

For more information visit www.aha-solutions.org , contact Lorna Waggoner at 1.877.899.9974 x17 or visit www.HIPAAAcademy.net

HIPAA Tip

COMPLIMENTARY 2-DAY CERTIFIED SECURITY COMPLIANCE SPECIALIST (CSCS) PROGRAM DELIVERED AT YOUR SITE

The CSCS Program is the first and only certification program that educates students in the core requirements of all major information security standards and regulations including PCI DSS, HIPAA, ISO 27002 (17799:2005) as well as FISMA. Hundreds of client testimonials can be reviewed at www.ecfirst.com . For a complimentary 2-day Certified Security Compliance Specialist (CSCS) program delivered at your site , please contact Lorna Waggoner at 1.877.899.9974 x17 or visit www.ecfirst.com . Only qualified organizations will be considered. Session will be confirmed after review by ecfirst.  Certain terms and conditions apply

COMPLIANCE E-LEARNING TRAINING COURSES LIBRARY FROM ecfirst

For a complete set of multimedia compliance and HIPAA computer-based courseware, please visit www.ecfirst.com . ecfirst ‘ courseware uses video scenarios, audio, text and interactive exercises to present compliance topics in an engaging and interesting format.  ecfirst courseware offers easy, flexible deployment while still maintaining high-quality multimedia content. To discuss your e-learning training requirements, please contact Lorna.Waggoner@ecfirst.com or call her at 1.877.899.9974 x17.