![](3D"https://www.vericept.com/images/spacer11.gif") |
| |
=93As one of the largest healthcare =
systems in the=20
greater DC area we are serving millions of patients at our=20
facilities, it is critical that we have a reliable, proven =
solution=20
in place to ensure that the confidential health information =
of our=20
patients is protected. After an extensive evaluation of =
several=20
competing offerings, it was clear to Inova that with =
Vericept's=20
market leading technology and leadership position in the=20
marketplace, The Vericept Risk Management Platform was the =
best=20
choice for us.=94
Inova Health=20
Press Release
![](3D"https://www.vericept.com/images/quote-dividers.gif"=20) |
| |
Vericept provides visibility into intentional or =
inadvertent=20
violations of compliance regulations including HIPAA, =
Sarbanes-Oxley, the=20
Gramm-Leach-Bliley Act, the PCI Data Security Standard, California =
Senate=20
Bill 1386 and other state data privacy laws, SEC regulations, U.S. =
federal=20
employment standards, EU Data Protection Directive, UK Data =
Protection Act=20
and Safe Harbor. Besides capturing these violations, this =
visibility and=20
control helps organizations provide auditors with evidence of =
adherence to=20
compliance regulations and understand what procedures need =
additional=20
staff training.
Health Insurance =
Portability and Accounting Act of 1996=20
(HIPAA)
![](3D"https://www.vericept.com/images/horiz-dividers.jpg"=20)
HIPAA was enacted by =
Congress to=20
establish standards of the privacy of individually identifiable =
health=20
information. Vericept understands the importance of protecting =
health=20
information and helping covered entities monitor for HIPAA =
compliance.=20
Working closely with healthcare experts, Vericept introduced the =
first=20
HIPAA Solution to monitor the transmission of Protected Health =
Information=20
across all protocols helping to identify and prevent:
- Electronic transmission of unencrypted PHI=20
- Identify unencrypted HL7 transmissions=20
- Unauthorized access and/or theft of PHI=20
- Rogue protocol usage
Gramm-Leach-Bliley Act =
(GLBA)
The Gramm-Leach-Bliley Act was =
signed=20
into law on November 12, 1999. Section 501, titled =93Protection =
of=20
Nonpublic Personal Information=94, requires the federal function =
regulators=20
to establish appropriate standards for the financial institutions =
subject=20
to their respective jurisdiction relating to administrative, =
technical and=20
physical safeguards. Working closely with financial experts =
including the=20
co-author of the GLBA Act, Vericept introduced the first GLBA =
Solution to=20
monitor the transmission of Non-public Personal Information across =
all=20
protocols to identify and prevent:
- Electronic transmission of unencrypted NPI and =
Sensitive=20
Customer Information=20
- Unauthorized access and/or theft of NPI and =
Sensitive=20
Customer Information=20
- Rogue protocol or encryption usage =
Sarbanes-Oxley (SOX)
The Sarbanes-Oxley Act mandates =
unprecedented accuracy in financial statements, disclosures and =
internal=20
controls management. Vericept helps to provide public corporations =
with=20
visibility into SOX compliance by monitoring all inbound and =
outbound=20
communication for violations such as insider trading, the leakage =
of=20
non-public merger and acquisition information, the posting of =
financial=20
statements prior to public disclosure, trading during quiet =
periods,=20
illegal pricing practices and violations of the corporate code of =
ethics=20
and conduct, and internal policies and procedures.
PCI Data Security Standard (PCI =
DSS)
In December 2004, the credit =
card=20
industry joined forces to develop the Payment Card Industry Data =
Security=20
Standard to protect cardholder data and to assure customers that =
their=20
account information would be safe whether making a purchase =
online, over=20
the phone or in a store. Working with industry experts, =
Vericept was=20
the first to introduce a PCI Data Security Standard Solution to =
monitor=20
the transmission of cardholder data across all protocols. The =
Vericept PCI=20
DSS Solution helps members, merchants and service providers with =
adherence=20
to Section 4 (Encryption) and Section 10 (Monitoring) of the =
Standard by=20
providing visibility and control of:
- Rogue transmission processes=20
- Unencrypted cardholder data=20
- Unauthorized access and/or theft of cardholder=20
information
State Data Privacy Laws
Today there are 30 states that =
have=20
enacted Data Privacy Laws across the United States demanding that=20
corporations and organizations conducting business in these states =
notify=20
their residents of any security breaches and in certain states =
take=20
proactive security measures to protect the customer information in =
their=20
databases. Vericept was the first content monitoring vendor to =
deliver a=20
solution for California=92s Senate Bill 1386 and now a State Data =
Privacy=20
Solution to monitor and protect the transmission of Personal =
Information=20
across all protocols alerting to:
- The transmission of unencrypted Personal =
Information=20
- Unauthorized access and/or theft of Personal =
Information=20
- Rogue transmission and encryption processes =
States with data privacy laws include Arizona , =
Arkansas ,=20
California , Colorado , Connecticut , Delaware , Florida , Georgia =
, Idaho=20
, Illinois , Indiana , Kansas , Louisiana , Maine , Minnesota , =
Montana ,=20
Nebraska , Nevada , New Jersey , New York , North Carolina , North =
Dakota=20
, Ohio , Pennsylvania , Rhode Island , Tennessee , Texas , Utah ,=20
Washington , Wisconsin.
SEC Regulations
In 2004 the SEC adopted rule =
38a-1 under=20
the Investment Company Act of 1940 and rule 206(4)-7 under the =
Investment=20
Advisers Act of 1940 requiring investment companies and investment =
advisers to adopt and implement policies and procedures to prevent =
violation of the federal securities laws and prevent activities =
such as=20
inappropriate market timing, late trading of fund shares, and the =
misuse=20
of material, nonpublic information about fund portfolios. Vericept =
helps=20
investment companies and advisors to safeguard and protect client =
records=20
and information, insider trading, and identify violations =
occurring=20
through Internet-based communication including email and instant=20
messaging.
U.S. Federal Employment =
Standards
Federal employment laws require =
corporations and organizations provide a safe working environment =
for=20
employees and protect them against acts such as sexual harassment, =
racism,=20
defamation and violence. For more than seven years, Vericept has =
been=20
providing visibility into potentially harmful insider behavior to =
help=20
protect against potential legal liability, fraudulent lawsuits, =
workplace=20
violence and an unsafe work environment.
European Union Directive on Data=20
Protection
The EU Data Protection =
Directive=20
requires each member state to enact legislation to protect =
personal=20
identifiable information (PII) against unauthorized access, =
destruction,=20
use, modification or disclosure of data, to prohibit the transfer =
of=20
European personal data outside the EU to countries without proper=20
safeguards in place, and to minimize the amount of personal data =
retained=20
for no longer than necessary. Vericept helps global organizations =
to=20
protect PII by preventing data loss, identifying where personal=20
information resides, providing access controls, detecting, =
preventing and=20
investigating security breaches, automatically encrypting PII=20
transmissions and blocking transmissions to unauthorized =
locations.=20
Vericept also masks the sender identity allowing for initial =
Incident=20
review without identity disclosure.
UK Data Protection =
Act
Based on the EU Data =
Protection=20
Directive, the Data Protection Act of 1998 provides safeguards for =
personal information in the United Kingdom . Vericept helps to =
monitor for=20
compliance by providing an exposure assessment to establish what=20
monitoring is necessary, preventing data loss, identifying where =
personal=20
information resides, providing access controls, detecting, =
preventing and=20
investigating security breaches, automatically encrypting PII=20
transmissions and blocking transmissions to unauthorized =
locations.=20
Vericept also masks the sender identity allowing for initial =
Incident=20
review without identity disclosure.
Safe Harbor
To =
allow for the=20
transfer of European personal data to U.S. companies, the United =
States=20
and the European Union created the Safe Harbor framework. Safe =
Harbor=20
consists of seven principles for protecting personal data =
including=20
implementing reasonable precautions to protect personal =
information from=20
loss, misuse and unauthorized access, disclosure, alteration and=20
destruction. Companies that comply with the privacy principles =
listed in=20
Safe Harbor are allowed to send, receive and store EU personal =
data.=20
Vericept helps to monitor for compliance by preventing data loss,=20
identifying where personal information resides, providing access =
controls,=20
detecting, preventing and investigating security breaches, =
automatically=20
encrypting PII transmissions and blocking transmissions to =
unauthorized=20
locations.
Ongoing Compliance Control
Vericept is committed to =
providing=20
visibility and control of state and federal compliance =
regulations. As new=20
regulations arise, Vericept will continue to develop solutions to =
meet the=20
needs of its customers in the healthcare, financial retail, =
manufacturing,=20
entertainment and government industries
|
![3D""=20](3D"https://www.vericept.com/images/spacer20.gif") |
|
![](3D"http://www.vericept.com/images/logo_new.gif"){kind=logo}
![3D""=20](3D"https://www.vericept.com/images/New-Spacer-LJ.jpg")
![3D""=20](3D"https://www.vericept.com/images/New-Spacer.jpg")
![](3D"https://www.vericept.com/images/Web_headers/Solutions_header.jpg")
![](3D"file:///Mac%20HD/Users/temp/Desktop/wwwroot_2/00_images/home_image=)
\n' + dClose);
else content +=3D ( dTag + dText + dClose);
if (lrs) {
l.document.open("text/html");
l.document.writeln(content);
l.document.close();=09
content =3D '';
theStat +=3D "-";
tsc++;
if (tsc > 50) {
tsc =3D 0;
theStat =3D "";
}
status =3D theStat;
}
countItems++; =20
}
if (lrs) {
var focusItem =3D new Layer(100, body);
focusItem.visiblity=3D"hidden";
focusItem.document.open("text/html");
focusItem.document.writeln("=A0");
focusItem.document.close();=09
} else {
content +=3D '