Happy National Cyber Security Awareness Month from Liquid Web! We believe this effort to create a safe, secure and resilient cyber environment is a worthy of commemoration. We’re celebrating by talking about some of the security services we offer at Liquid Web, such as HIPAA Compliant Hosting. Liquid Web provides the technical controls, physical security and policies to ensure your server is compliant with HIPAA regulations.
HIPAA, the Health Insurance Portability and Accountability Act, requires organizations to implement safeguards and security standards when electronically storing and transmitting personal health information. The consequences of losing or allowing unauthorized access to confidential medical data are nothing to laugh at, ranging from damaged reputations to serious legal penalties. With our multitude of security options, Liquid Web can help our customers achieve compliance status.
Liquid Web Features:
- HIPAA Compliant Network Solutions
- A Multitude of Physical Security Measures Beyond Those Required
- Extensive Data Security Measures
- High Availability Infrastructure
- A 24/7/365 on-site HIPAA trained staff
An important part of HIPAA compliance is the certification process. While we offer the hardware, infrastructure and security portion of HIPAA compliance, we cannot provide the official certification. Customers must consult with a certified Auditor to complete the application and ensure it is compliant. An auditor is necessary because of numerous factors at the application level that have to meet federal regulations.They can help the customer with what needs to be addressed, including working with the customer to get their final application submitted to the Office of Civil Rights/US Department of Health and Human Services, who is the ultimate authority in declaring a customer’s system as HIPAA compliant.
Our HIPAA compliant environments include a traditional dedicated server, a locked cabinet, a dedicated hardware firewall, hot swappable hard drives and encrypted offsite backups. Additional services that are recommended but not required include PCI Compliance and ServerSecurePLUS. While HIPPA regulations have not traditionally required PCI Compliance, provisions under the Affordable Care Act (ACA) include additional rules that will require this service for health care exchanges utilizing Electronic Funds Transactions (EFT) in claims.
If you’d like to learn more about PCI Compliance, stay tuned later in the week for our explanation of Liquid Web’s PCI Compliance offerings.
Liquid Web offers a number of plans for our customers who need to be compliant with HIPAA regulations, for both Linux and Windows. Our HIPAA-trained staff are prepared to take you through the step-by-step process leading up to certification in order to create the most secure environment possible for your confidential medical data.
If you’d like more information on our HIPAA Compliant Hosting or how to implement your own setup, call a sales representative at 1-800-580-4985.