I bet when there patient information is taken by a backdoor/Trojan/Malware/Spyware, rootkit, and sold on the open market, and they are nailed for HIPPA privacy and other security violations, said DR would have thought twice about letting those users be administrators, which lead to the compromise of his information systems, that they are processing our PHI on..
Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + [email protected] Phone:401-639-3505 -----Original Message----- From: Angus Scott-Fleming [mailto:[email protected]] Sent: Friday, June 05, 2009 10:27 AM To: NT System Admin Issues Subject: Re: My OS is better than your OS (was: Mac Anti-Malware) On 5 Jun 2009 at 5:16, Jon Harris wrote: > The biggest issue I see when dealing with the home/SOHO user is the > REFUSAL by the user to have two accounts on their system. One for > installing software and one for use. I face this everytime I get called > in to fix a system. Two weeks ago I got called into a doctors office > because one of his staff had been browsing the Internet and got infected > by a virus. Not only was the user an admin but the doctor when told > that was unsafe said he just wanted to keep the staff happy and let them > install stuff on his systems like screen savers, and other software they > found on the net. I tried for more than an hour to get him to let me > change all the users out of administrators. He just did not want to > change, he and his users like the ability to install what they see > without thinking of a user ID and password. Too bad there isn't a formal HIPAA standard that REQUIRES running as a non- admin in all situations where client data is being accesses. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 +-----------------------------------+ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
