Solved

Terminal Server and HIPAA Compliance

Posted on 2006-07-17
7
570 Views
Last Modified: 2010-04-11
All:

Just wanted to find out whether or not Terminal Server is considered HIPAA Compliant.  Does any one have any information regarding this?  Also your thoughts on PC Anywhere and HIPAA Compliance

jocasio
0
Comment
Question by:Juan Ocasio
  • 4
  • 3
7 Comments
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 17125730
First, software is not inherently HIPAA Compliant. It depends on how you use it.

That said, PC Anywere logs only to the local computer, so if you have a log management and reporting solution (which is required by HIPAA) based on getting logs from the domain controllers, TS will work with it, whereas PCA won't.
0
 
LVL 14

Author Comment

by:Juan Ocasio
ID: 17125859
So you are saying that my company can be HIPAA complaint while using Terminal Server?  I guess that was my real question.  We want clients to have the ability to view their accounts via Terminal Server so we want to make sure this would not have an affect with respect to HIPAA compliance.

Thanks again,

jocasio
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 17125879
Yes, it is possible to be HIPAA Compliant and use Terminal Server. Whether you are compliant currently or will implement TS in such a way to remain compliant, is another matter howerver.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 14

Author Comment

by:Juan Ocasio
ID: 17126425
How would you suggest implementing TS to remain compliant?
0
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 125 total points
ID: 17130117
HIPAA Security Rule is all about access control, addressing vulnerabilities, and audit log reporting.

A compliant TS implementation would limit who could connect, limit what authorized individuals could do once they connected, keep up to date on patches, and have someone reviewing the logs of who connected and what they did.
0
 
LVL 14

Author Comment

by:Juan Ocasio
ID: 17132404
Thanks for the info!
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 17132434
No problem
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Find out what Office 365 Transport Rules are, how they work and their limitations managing Office 365 signatures.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now