Bugtraq mailing list archives
Re: Microsoft technologies. By default, non-HIPAA compliant?
From: Dave Paris <dparis () w3works com>
Date: Wed, 30 Jun 2004 15:50:20 -0400
Believe it. Banking is concerned with regulatory requiprements, Medical/HIPAA is concerned with privacy of data on every level, appropriate access to data, the ability to access data in an emergency in a secure, aduitable manner, and all other variations of complexities. The basic HIPAA electronic security guidelines consist of mandatory and "addressable" components. How each company addresses the "addressable" components is open to interpretation. Banking is stringent, to be sure - but HIPAA takes accountability and privacy to a whole new level.
Kind Regards, -dsp Cameron, Thomas wrote:
-----Original Message----- From: Anything But Microsoft [mailto:abm () anythingbutmicrosoft org] Sent: Tuesday, June 29, 2004 9:43 PM To: <@securityfocus.com BUGTRAQ Cc: secure () microsoft com Subject: Microsoft technologies. By default, non-HIPAA compliant? The US health care system is the only industry where best network and security practices are a federally mandated requirement.Um, no. I work in the banking industry and we are federally regulated and audited for security. I've never worked in the medical industry but I'd be surprised if their requirements are more stringent than ours.
[....]
Current thread:
- RE: Microsoft technologies. By default, non-HIPAA compliant? Boring, Andrew (Jul 01)
- <Possible follow-ups>
- Re: Microsoft technologies. By default, non-HIPAA compliant? Dave Paris (Jul 01)
- RE: Microsoft technologies. By default, non-HIPAA compliant? bob () dexis net (Jul 02)
- Re: Microsoft technologies. By default, non-HIPAA compliant? Nicholas Weaver (Jul 02)
- Re: Microsoft technologies. By default, non-HIPAA compliant? Nick FitzGerald (Jul 02)
- RE: Microsoft technologies. By default, non-HIPAA compliant? Anything But Microsoft (Jul 06)
- RE: Microsoft technologies. By default, non-HIPAA compliant? Tina Bird (Jul 06)