> HIPAA has made it a new world. The attorneys are already salivating and
> trying to dig up any potential "victims" they can find, look to Arizona as
> an example. Since this box was used to attacke doctor's records, there is a
> good chance it's tracks will be found. This guys got two options, either
> don't touch the box, play dumb, and hope the cracker doesn't know how to
> cover his tracks (unlikely), or dd the drive, take the box offline (in that
> order in case it has a smart-bomb planted), and notify notify notify.
>
> We are instituting IDS and logging systems for healthcare customers every
> day and are finding attacks that they would not have even guessed at a year
> ago. By law they must keep their logs three years, plenty of time for even
> scumbag lawyers to find it. If you have done due diligence, you will be a
> sitting duck.
HIPAA compliance is much more then logging and IDS. But, I trust that
this is not the limit of the services DP Solutions provides in such cases.
Of course HIPAA is not a "new world" thing, but, rather a compliance issue
for a new class of users and data.
Thanks,
Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
***testing, only testing, and damn good at it too!***
OK, so you're a Ph.D. Just don't touch anything.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
