Code Green Networks Solutions - Healthcare
Measure sensitive patient data loss on your network
For healthcare organizations, assuring the security of Patient Personally Identifiable Information (PII), Protected Health Information (PHI), and other sensitive information assets are crucial for demonstrating regulatory compliance and protecting their brand and reputation. Even more troublesome for healthcare organizations is the rapid rise in medical identity theft – now the fastest growing form of identity theft. Gartner Research estimated more than 1 million cases of medical identity theft in 2008 alone. With the increasing threat of medical identity theft looming and expanding state/federal/industry regulations regarding data security, healthcare organizations are taking steps to prevent loss or exposure of sensitive patient data.
Featuring cost-effective, easy to deploy and easy to manage solutions, Code Green Networks enables healthcare organizations to:
- Ensure compliance with regulations such as HIPAA, Red Flags Rule, PCI, and state/federal privacy regulations
- Automatically encrypt emails utilizing policy-driven healthcare data classification and filtering
- Provide unobtrusive enforcement of data loss prevention policies across all popular Internet communication channels
- Utilize HIPAA code sets (e.g. HCPCS, ICD-9, LOINC, and NDC) as built-in dictionaries to prevent patient data from inadvertently leaving the organization
- Scan all servers and endpoint computers for PHI and PII data
Healthcare Data Loss Assessment
Loss of patient data is a top concern for any healthcare organization. You handle some of the most sensitive and personal data on the individuals you treat: patient demographics, patient insurance, patient credit and financial information. Your patients trust you to safeguard this very sensitive data.
Is your patients’ sensitive data at risk?
You have controls in place to protect who can access patient records. But protecting patient data means more than determining who can access patient records. What happens to patient information after it has been accessed by a trusted party?
- Is patient information being communicated via webmail?
- Is patient information being posted on social networking sites or blogs?
- Is patient financial information being sent to partners securely?
- Is patient clinical data being transmitted to partners over insecure channels?
Healthcare Data Loss Assessment
The Healthcare Data Loss Assessment measures the amount of sensitive patient data lost over a fixed period of time. The process identifies sensitive patient data being lost and the applications or individuals putting your patients’ sensitive data at risk.
Healthcare Data Loss Assessment measures:
- Loss of patient demographic information
- Loss of patient clinical information
- Loss of patient credit, billing and insurance information
- Unencrypted HL7 or X12 transmissions
The Healthcare Data Loss Assessment will allow you to:
- Validate the current controls on sensitive patient data
- Validate the effectiveness of current patient data security policies
- Measure patient data lost to the Internet across the most common protocols
- Prioritize remediation actions for any losses uncovered
How Does the Healthcare Data Loss Assessment Work
- A Code Green Networks CI Appliance is installed on your network
- Sensitive patient data residing within Hospital Information Systems, including patient demographic, clinical and accounting databases are securely registered with the CI Appliance.
- The CI Appliance passively monitors outbound Internet traffic for sensitive patient data.
- If sensitive data is identified in network traffic the appliance captures details such as Source IP, Destination IP, Protocol and Category of information lost.
- At the end of the monitoring period a Healthcare Data Loss Assessment report is created and delivered to you.
Healthcare Data Loss Assessment Report
At the end of the assessment you will receive a comprehensive Healthcare Data Loss Assessment Report.
The report details:
- Patient demographic information lost
- Patient clinical information lost
- Patient Credit Card, Billing and insurance information lost
- Unencrypted HL7 and X12 transmissions detected
- Channel where the loss occurred (SMTP, WebMail, HTTP, FTP, TCP/IP)
- Recommended steps for remediation
The Healthcare Data Loss Assessment will help guide the creation of an effective data loss prevention strategy.
About TrueDLP for Healthcare
TrueDLP for Healthcare provides patent pending technology for detecting and preventing the loss of Electronic Health Records. The Code Green Networks solution enables healthcare organizations to defend themselves against the inadvertant loss of sensitive patient information.
The TrueDLP for Healthcare solution includes one or more Code Green Content Inspection appliances that ship preloaded with a wide range of HIPAA code set and healthcare EDI protocol identifiers, such as: ICD-9, LOINC®, NDC, SNOMED CT®, HCPCS, HL7 and X12. Administrators simply need to register their sensitive data or documents and then activate one or more of the preloaded policy and reporting templates to begin detecting sensitive healthcare data leaks over the network.
Code Green Networks Healthcare Data Loss Assessment Datasheet (.PDF)