Healthcare Standards and Regulations

[Jason Kolpin <jasonk () ncat org>]

Hello!

I have been approached by a small medical practice to build an 
infrastructure from the ground up. After some research I decided I knew 
nothing about best practices and such in this environment, these folks 
are in a rural area and have no clue who to contact, I am at a loss as 
well other than a big company like Seimans or something. It would be 
greatly appreciated if anyone on this list knew of a place where I could 
get some solid information on this subject, refer these folks to a 
company that does this sort of thing, or offer some advice for a 
situation such as this. It's not like I am completely clueless 
concerning server setup and stuff like that, I work IT, I am more 
interested in security related information such as typical physical 
layout for the network, IE firewalling and data/service separation issues.

Excuse my ignorance here as this is completely new to me.
I have been asked about LIS, RIS, PM, patient records server, 
scheduling/calendar, billing, email server, domain controller, VPN from 
two locations and some more. I'm just looking for some simple "stick 
man" drawings of a typical physical layout using this type of stuff, as 
well as a place I might go to find out about required/mandated policies 
and such, and even a few hints on policies you may know that you find 
important in a situation such as this.

FYI I have already informed these people I am not the man for the job as 
the risk is too great for me should something bad happen but they are 
probably going to use me as a consultant, they have no IT staff and are 
completely clueless about how the simplest of things work.

I know this is a lot to ask of a mailing list so no surprise if I get no 
response.

--
Jason Kolpin
Web Specialist
National Center for Appropriate Technology
www.ncat.org



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------