|By Business Wire||
|December 3, 2012 12:23 PM EST||
A tiny USB drive stolen from the car of an Alaska health worker wound up costing the state of Alaska $1.7 million in federal fines last July. Will your organization be protected when enforcement of health privacy laws skyrockets in 2013?
Online Tech announced today it is the first data center operator to have its data centers and cloud computing infrastructure voluntarily audited to the U.S. Office for Civil Rights (OCR) HIPAA Audit Protocol.
“For the Department of Health and Human Services and OCR this isn’t a joking matter anymore – you will comply,’’ said Nate Buchholz, Information Services Director at Genesys Physician Hospital Organization (PHO). “We have five FTEs all dedicated to securing our infrastructure. Online Tech is our data center colocation partner: they keep our lights on.’’ With the federal enforcement soaring in 2013, Buchholz said health providers are turning to Online Tech because “they take security seriously.’’
“We provide cloud hosting for healthcare clients from across the country,” said Mike Klein, CEO of Online Tech. “These clients need the assurance that the data centers and the cloud infrastructure where they are hosting PHI (Protected Health Information) are audited to the requirements of HHS and Office for Civil Rights. None of our clients want to be fined by the Office for Civil Rights because their hosting provider failed to live up to the OCR audit requirements.”
UHY Advisors, LLP recently completed Online Tech’s independent third-party HIPAA attestation on the company’s cloud infrastructure and all three data centers. Online Tech and UHY agreed to use the newly established OCR guidelines that all healthcare and health IT companies will face from the Office of Civil Rights starting in 2013.
Online Tech is not a covered entity, but rather a business associate (an organization providing a service to a covered entity). Although the initial audit program only applies to covered entities, Online Tech decided to proceed with an independent attestation using the new guidelines.
The American Recovery and Reinvestment Act of 2009 requires the Department of Health and Human Services (HHS) to perform periodic audits of covered entities and business associates to determine if they are complying with HIPAA requirements. A November 2011 to December 2012 HHS Office for Civil Rights pilot program selected 115 organizations across the country to undergo the scrutiny of privacy, security, and breach notification audits by KPMG.
The OCR does not plan to penalize targets for pilots unless they uncover “serious compliance issues.” The HITECH Act has civil penalties for HIPAA violations that can reach $50,000 per violation and up to $1.5 million for identical violations across multiple records in a single calendar year.
In June 2012, the OCR released a copy of the protocol it is using to audit HIPAA compliance under their pilot program. The protocol provides a breakdown of specific audit criteria they are using for HIPAA audits. The protocol includes 169 specific performance criteria organized around compliance in three areas: the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule.
HIPAA data center compliance is no small investment. Data center operators must not only deliver the technology to meet the administrative, physical and technical safeguards required by the HIPAA security rule, they must also invest in policies, training, breach notification processes, legal support for business associates agreements, and HIPAA insurance. In addition, the organization must commit to consistently monitoring the safeguards and processes to ensure the security of the electronic protected health information (ePHI).
In 2011, Online Tech became the first data center operator to be independently audited for HIPAA compliance. This year, Online Tech decided it wanted to be the first data center operator independently audited against the OCR HIPAA Audit Program Protocol.
“It was a commitment and investment we knew we had to make to serve the best interest of our healthcare clients,” Klein said.
About Online Tech
Online Tech, Michigan’s largest managed data center is becoming the largest in the Midwest, expanding into at least four new markets. The “Fort Knox’’ for data is known for complete redundancy - “backups for everything” - from multiple back-up generators and backup systems to locations straddling two power grids and even two CEOs.
Online Tech leads in secure, compliant hosting services including cloud hosting, managed dedicated servers, Michigan colocation and disaster recovery. Online Tech’s Midwest data centers assure mission critical applications are always available, comply with government & industry regulations, and continue operating after a disaster. Backed by independent HIPAA, PCI, SSAE 16, and SOC 2, Online Tech delivers the security, privacy, and availability expected from world class data center operators. For more information, call (877)740-5028, email [email protected] or visit www.onlinetech.com .
Press Contact: April Sage, Director of Marketing, Healthcare Vertical, 734.213.2020 x 113, [email protected]
For additional information, please visit UHY Advisors, LLP at www.uhy-us.com.
In a world of ever-accelerating business cycles and fast-changing client expectations, the cloud increasingly serves as a growth engine and a path to new business models. Dynamic clouds enable businesses to continuously reinvent themselves, adapting their business processes, their service and software delivery and their operations to achieve speed-to-market and quick response to customer feedback. As the cloud evolves, the industry has multiple competing cloud technologies, offering on-premises ...
Jan. 31, 2015 12:15 PM EST Reads: 1,960
DevOps Summit 2015 New York, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that it is now accepting Keynote Proposals. The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time to wait for long development cycles that produce software that is obsolete...
Jan. 31, 2015 12:15 PM EST Reads: 2,645
Connected devices and the Internet of Things are getting significant momentum in 2014. In his session at Internet of @ThingsExpo, Jim Hunter, Chief Scientist & Technology Evangelist at Greenwave Systems, examined three key elements that together will drive mass adoption of the IoT before the end of 2015. The first element is the recent advent of robust open source protocols (like AllJoyn and WebRTC) that facilitate M2M communication. The second is broad availability of flexible, cost-effective ...
Jan. 31, 2015 12:00 PM EST Reads: 2,738
“We are strong believers in the DevOps movement and our staff has been doing DevOps for large enterprise environments for a number of years. The solution that we build is intended to allow DevOps teams to do security at the speed of DevOps," explained Justin Lundy, Founder & CTO of Evident.io, in this SYS-CON.tv interview at DevOps Summit, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Jan. 31, 2015 12:00 PM EST Reads: 2,245
SYS-CON Events announced today that that Innodisk, the service-driven provider of industrial embedded flash and DRAM storage products and technologies, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. Innodisk is a service-driven provider of industrial embedded flash and DRAM storage products and technologies. With satisfied customers across the embedded, aerospace and defense, cloud storage markets an...
Jan. 31, 2015 12:00 PM EST Reads: 872
The Internet of Things will put IT to its ultimate test by creating infinite new opportunities to digitize products and services, generate and analyze new data to improve customer satisfaction, and discover new ways to gain a competitive advantage across nearly every industry. In order to help corporate business units to capitalize on the rapidly evolving IoT opportunities, IT must stand up to a new set of challenges. In his session at @ThingsExpo, Jeff Kaplan, Managing Director of THINKstrateg...
Jan. 31, 2015 11:45 AM EST Reads: 2,812
"Our premise is Docker is not enough. That's not a bad thing - we actually love Docker. At ActiveState all our products are based on open source technology and Docker is an up-and-coming piece of open source technology," explained Bart Copeland, President & CEO of ActiveState Software, in this SYS-CON.tv interview at DevOps Summit at Cloud Expo®, held Nov 4-6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Jan. 31, 2015 11:45 AM EST Reads: 3,010
Eighty-five percent of companies store information in some sort of unstructured manner. In this demo at 15th Cloud Expo, Mark Fronczak, Product Manager at Solgenia, discussed their enterprise content management solution, which was created to help companies organize and take control of their digital assets.
Jan. 31, 2015 11:30 AM EST Reads: 1,765
The BPM world is going through some evolution or changes where traditional business process management solutions really have nowhere to go in terms of development of the road map. In this demo at 15th Cloud Expo, Kyle Hansen, Director of Professional Services at AgilePoint, shows AgilePoint’s unique approach to dealing with this market circumstance by developing a rapid application composition or development framework.
Jan. 31, 2015 11:30 AM EST Reads: 2,361
Fundamentally, SDN is still mostly about network plumbing. While plumbing may be useful to tinker with, what you can do with your plumbing is far more intriguing. A rigid interpretation of SDN confines it to Layers 2 and 3, and that's reasonable. But SDN opens opportunities for novel constructions in Layers 4 to 7 that solve real operational problems in data centers. "Data center," in fact, might become anachronistic - data is everywhere, constantly on the move, seemingly always overflowing. Net...
Jan. 31, 2015 11:15 AM EST Reads: 2,921
Leysin American School is an exclusive, private boarding school located in Leysin, Switzerland. Leysin selected an OpenStack-powered, private cloud as a service to manage multiple applications and provide development environments for students across the institution. Seeking to meet rigid data sovereignty and data integrity requirements while offering flexible, on-demand cloud resources to users, Leysin identified OpenStack as the clear choice to round out the school's cloud strategy. Additional...
Jan. 31, 2015 11:15 AM EST Reads: 2,785
The move in recent years to cloud computing services and architectures has added significant pace to the application development and deployment environment. When enterprise IT can spin up large computing instances in just minutes, developers can also design and deploy in small time frames that were unimaginable a few years ago. The consequent move toward lean, agile, and fast development leads to the need for the development and operations sides to work very closely together. Thus, DevOps become...
Jan. 31, 2015 11:00 AM EST Reads: 3,575
An entirely new security model is needed for the Internet of Things, or is it? Can we save some old and tested controls for this new and different environment? In his session at @ThingsExpo, New York's at the Javits Center, Davi Ottenheimer, EMC Senior Director of Trust, reviewed hands-on lessons with IoT devices and reveal a new risk balance you might not expect. Davi Ottenheimer, EMC Senior Director of Trust, has more than nineteen years' experience managing global security operations and asse...
Jan. 31, 2015 11:00 AM EST Reads: 3,409
DevOps is all about agility. However, you don't want to be on a high-speed bus to nowhere. The right DevOps approach controls velocity with a tight feedback loop that not only consists of operational data but also incorporates business context. With a business context in the decision making, the right business priorities are incorporated, which results in a higher value creation. In his session at DevOps Summit, Todd Rader, Solutions Architect at AppDynamics, discussed key monitoring techniques...
Jan. 31, 2015 11:00 AM EST Reads: 2,737
IBM has announced software that allows people to hide or anonymize their personal information on the Web, ensuring protection from identity theft and other misuse. Developed by researchers at IBM's laboratory in Zurich, Switzerland, the software – called Identity Mixer – will enable consumers to purchase goods and services on the Internet without disclosing personal information. As consumers hand over personal details in exchange for downloading music or subscribing to online newsletters, they...
Jan. 31, 2015 11:00 AM EST Reads: 941
Building low-cost wearable devices can enhance the quality of our lives. In his session at Internet of @ThingsExpo, Sai Yamanoor, Embedded Software Engineer at Altschool, provided an example of putting together a small keychain within a $50 budget that educates the user about the air quality in their surroundings. He also provided examples such as building a wearable device that provides transit or recreational information. He then reviewed the resources available to build wearable devices at ...
Jan. 31, 2015 11:00 AM EST Reads: 2,506
The Internet of Things promises to transform businesses (and lives), but navigating the business and technical path to success can be difficult to understand. In his session at @ThingsExpo, Sean Lorenz, Technical Product Manager for Xively at LogMeIn, demonstrated how to approach creating broadly successful connected customer solutions using real world business transformation studies including New England BioLabs and more.
Jan. 31, 2015 10:45 AM EST Reads: 2,734
The Internet of Things is not new. Historically, smart businesses have used its basic concept of leveraging data to drive better decision making and have capitalized on those insights to realize additional revenue opportunities. So, what has changed to make the Internet of Things one of the hottest topics in tech? In his session at @ThingsExpo, Chris Gray, Director, Embedded and Internet of Things, discussed the underlying factors that are driving the economics of intelligent systems. Discover ...
Jan. 31, 2015 10:45 AM EST Reads: 3,283
Mobile commerce traffic is surpassing desktop, yet less than 20% of sales in the U.S. are mobile commerce sales. In his session at 15th Cloud Expo, Dan Franklin, Segment Manager, Commerce, at Verizon Digital Media Services, defined mobile devices and discussed how next generation means simplification. It means taking your digital content and turning it into instantly gratifying experiences.
Jan. 31, 2015 10:45 AM EST Reads: 2,255