Solved

Terminal Server and HIPAA Compliance

Posted on 2006-07-17
7
578 Views
Last Modified: 2010-04-11
All:

Just wanted to find out whether or not Terminal Server is considered HIPAA Compliant.  Does any one have any information regarding this?  Also your thoughts on PC Anywhere and HIPAA Compliance

jocasio
0
Comment
Question by:Juan Ocasio
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 17125730
First, software is not inherently HIPAA Compliant. It depends on how you use it.

That said, PC Anywere logs only to the local computer, so if you have a log management and reporting solution (which is required by HIPAA) based on getting logs from the domain controllers, TS will work with it, whereas PCA won't.
0
 
LVL 14

Author Comment

by:Juan Ocasio
ID: 17125859
So you are saying that my company can be HIPAA complaint while using Terminal Server?  I guess that was my real question.  We want clients to have the ability to view their accounts via Terminal Server so we want to make sure this would not have an affect with respect to HIPAA compliance.

Thanks again,

jocasio
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 17125879
Yes, it is possible to be HIPAA Compliant and use Terminal Server. Whether you are compliant currently or will implement TS in such a way to remain compliant, is another matter howerver.
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 
LVL 14

Author Comment

by:Juan Ocasio
ID: 17126425
How would you suggest implementing TS to remain compliant?
0
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 125 total points
ID: 17130117
HIPAA Security Rule is all about access control, addressing vulnerabilities, and audit log reporting.

A compliant TS implementation would limit who could connect, limit what authorized individuals could do once they connected, keep up to date on patches, and have someone reviewing the logs of who connected and what they did.
0
 
LVL 14

Author Comment

by:Juan Ocasio
ID: 17132404
Thanks for the info!
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 17132434
No problem
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There is a lot to be said for protecting yourself and your accounts with 2 factor authentication.  I found to my own chagrin, that there is a big downside as well.
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Suggested Courses
Course of the Month5 days, 15 hours left to enroll

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question