HIPAA Compliance

Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information held by the covered entity.

Endpoint Central's patch management feature helps in deploying patches across every major operating system (Windows, Mac & Linux) and helps in patching third party applications. The periodic scans initated in the network gives details of the IT assets in the network and identifies vulnerable systems and applications.

Endpoint Central also provides exhaustive reports on system vulnerabilities, patches, OS, firewall, filevault, bitlocker, antivirus, etc. which elaborates the threats present in the network devices..

Implement security measures sufficient to reduce risks and vulnerabilities to a reasonable and appropriate level to comply with §164.306(a).

Endpoint Central's Automate Patch Deployment (APD) feature provides administrators the ability to deploy patches missing in their network computers automatically, without any manual intervention. Periodic patching of vulnerable devices ensures the security of the ePHI available in the network devices.

Endpoint Central's Secure USB feature allows network administrators to limit the scope of USB device usage by restricting selectively, blocking or allowing full use, thereby prohibiting any data leak. Geo-tracking, data wipe, putting the device in Kiosk Mode and remote lock of mobile devices enhances device security.

Endpoint Central helps to deploy customised firewall settings and prohibit software to implement additional security measure. The Browser Security module helps in preventing browser based threats and protect enterprise data from credential thefts, phishing attacks and accidental data leakage.

Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports.

Endpoint Central provides various reports based on User log on/log off, USB device, alerts based on Software added/removed, periodic anitivirus updates, firewall, bitlocker and filevault status.

Implement procedures for the authorization and/or supervision of workforce members who work with electronic protected health information or in locations where it might be accessed.

With the help of Endpoint Central, an IT admin can authorize permission to access file/folder/registry to users and groups who work with ePHI.

Using User logon reports, log on information can be periodically reviewed and inapproriate/failed log on can be detected.

Implement procedures to determine that the access of a workforce member to electronic protected health information is appropriate.

Using Endpoint Central, an IT admin can manage permissions granted to access file/folder/registry to users and groups who work with ePHI. With user logon reports, logon information can be periodically reviewed and failed logon can be detected.

Implement policies and procedures for granting access to electronic protected health information, for example, through access to a workstation, transaction, program, process, or other mechanism.

An IT admin can manage access provided to the users using Endpoint Central. Using Group Management, the administrator can add, remove or modify user policies and user groups thereby securing access to ePHI.

Also, permission to add/remove drives, can be provided to specific resources in the network.

Periodic security updates

Endpoint Central provides Automate Patch Deployment (APD) feature, Antivirus definition updates and driver updates to secure the network.

Procedures for guarding against, detecting, and reporting malicious software.

Endpoint Central's ability to prohibit software and block executable files helps in guarding against malicious software. 

The firewall configuration in Endpoint Central additionally helps in protecting all network devices.

Procedures for monitoring log-in attempts and reporting discrepancies.

Endpoint Central provides numerous reports on User log on/logoff, Last Logon Failed User Accounts, Currently Logged on Users, Currently Logged on Computers, etc. to monitor log-in attempts. 

Procedures for creating, changing, and safeguarding passwords.

With the help of Endpoint Central, an IT admin has the provision to change user's password.

Using Endpoint Central, the administrator can take folder/file backup of important data which can be used to restore lost data under emergency conditions.

Implement electronic procedures that terminate an electronic session after a predetermined time of inactivity.

Endpoint Central provides remote lock, signoff and shutdown features to terminate a session.

Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.

Endpoint Central provides centralised inventory of hardware/software details of mobiles, desktops and laptops.

With User Logon reports, one can record the log on activities in Information Systems.

Implement procedures to verify that a person or entity seeking access to electronic protected health information is the one claimed.

Using Endpoint Central, permissions to access restricted files/folders can be allowed for specific users.