HIPAA Network Guidelines

["Menne, Michael S" <michael.menne () MNSU EDU>]

Good morning all,
We are a medium sized University with three small HIPAA clinics. We have a dental clinic that serves the general 
public, Student Health Services that serves  students and graduated students for 6 months after graduation, as well as 
a Speech Rehabilitation clinic that serves the general public by referral.

Our network team is asking for some guidelines for protecting HIPAA data from a network standpoint. I'm not a HIPAA 
expert and have done the best I can to provide guidance on network segmentation.  Does anyone have any network 
guidelines on protecting HIPAA information?

Thanks,

Michael Menne, CISSP
Chief Information Security Officer
IT Solutions Information Security
Minnesota State University, Mankato
Phone:  (507) 389-5705
mnsu.edu/cyberaware<https://mnsu.edu/cyberaware>

[signature_2008603909]

Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community