Re: [WISPA] Wireless Security biting you in the ass?

2006-11-28 Thread Mark Koskenmaki
One of my clients is a maker of prosthetic limbs... and he has two offices. He is covered by HIPAA considerations, so we spent considerable time trying to figure this out, using the information supplied to him, concerning HIPAA, from the feds and by trade organizations. We eventually came to the

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-28 Thread Carl A Jeptha
John, Ask them to supply you with the HIPPA compliance list point-by-point. Then you show how you can comply when it is your responsibility and also point out where they are responsible for security. Then summarise this and they will see that they are more responsible for this HIPPA thing than

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-28 Thread Tom DeReggi
DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Peter R. [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Monday, November 27, 2006 11:48 PM Subject: Re: [WISPA] Wireless Security biting you in the ass? Back to your problem

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-28 Thread Frank Muto
General List wireless@wispa.org Sent: Tuesday, November 28, 2006 7:42 AM Subject: Re: [WISPA] Wireless Security biting you in the ass? John, Ask them to supply you with the HIPPA compliance list point-by-point. Then you show how you can comply when it is your responsibility and also point out where

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-28 Thread Tom DeReggi
- From: Frank Muto [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Tuesday, November 28, 2006 10:42 AM Subject: Re: [WISPA] Wireless Security biting you in the ass? Here is a white paper that may have some useful info. http://www.igov.com/informationtech/pdfdirectory

RE: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Rick Smith
I've been wonderin about this same thing. I've always blown it off and won the argument but Where's the HIPAA cert stuff to be found ? Like, exact checklists ? R -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Scrivner Sent: Monday, November

RE: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Charles Wu
I can expand on this, but would that be considered a vendor pitch ? (discussion will include product capabilities, etc) -Charles --- WiNOG Wireless Roadshows Coming to a City Near You http://www.winog.com -Original Message- From: [EMAIL

RE: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Dennis Burgess - 2K Wireless
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marlon K. Schafer (509) 982-2181 Sent: Monday, November 27, 2006 4:25 PM To: WISPA General List Subject: Re: [WISPA] Wireless Security biting you in the ass? Officially, hippa compliance is a CLIENT issue. As long as the data

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Matt Larsen - Lists
HIPAA is NOT your responsibility. It is the responsibility of the hospital/health care entity to make sure that they are HIPAA compliant at the point where they connect to the Internet. If they are unable to make that distinction, then doing business with them is asking for trouble because

RE: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Patrick Leary
John, this is a common question of a vastly misunderstood issue. And while I do not purport to be an expert on HIPAA, I have encountered the question many times. There is no such thing as being HIPAA compliant from a hardware standpoint. Rather, HIPAA addresses how information is handled as it

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Peter R.
Great questions, Marlon! You are correct that it is application/data encryption needed, not transport security. Every hospital has a HIPAA Officer. Talk to that person. By 2009, they all have to have EMR and HIPPA compliance, along with some EDI with health insurance payers. - Peter

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread lakeland
Good luck Rick. Last I looked there was no clear outline Bob Sent from my Verizon Wireless BlackBerry -Original Message- From: Rick Smith [EMAIL PROTECTED] Date: Mon, 27 Nov 2006 17:23:15 To:'WISPA General List' wireless@wispa.org Subject: RE: [WISPA] Wireless Security biting you

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread lakeland
John To the best of my knowledge there are no HIPPA compliant solutions that are actually approved We have installed a ton of links for hospitals and other medical facilities an this issur comes up from time to time. We pretty much tell the customer that we are just a carrier and we encrypt

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Tom DeReggi
Broadband - Original Message - From: Dennis Burgess - 2K Wireless [EMAIL PROTECTED] To: 'WISPA General List' wireless@wispa.org Sent: Monday, November 27, 2006 5:32 PM Subject: RE: [WISPA] Wireless Security biting you in the ass? John, Do you have a listing of HIPPA security needs? One

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Butch Evans
On Mon, 27 Nov 2006 [EMAIL PROTECTED] wrote: HIPPA compliance should beUp to the network administrator. Not the carrier IMHO. This is not a matter of opinion. It is factual. -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ Mikrotik

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Mark Nash - Lists
wireless@wispa.org Sent: Monday, November 27, 2006 3:23 PM Subject: Re: [WISPA] Wireless Security biting you in the ass? I think its important to understand where the client's fear comes from. Its thinking that they are opening their network wide up. HIPPA is making a client process compliant

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread George Rogato
I have a few hospital employees working at home across my wireless system. They vpn into the hospital and we don't do anything special for them. One reason that they tell the employees to use us is because we service them quickly when they have an issue. I will agree that we've lost work

RE: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Jeff Broadwick
Security biting you in the ass? John, Do you have a listing of HIPPA security needs? One thing you can do is provide a secure tunnel, IPSEC is best, or a security on top of security approach. This tunnel will run from your customer equipment, his hospital, etc, to your boarder router etc

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Marlon K. Schafer (509) 982-2181
/marlon/cam - Original Message - From: Peter R. [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Monday, November 27, 2006 2:44 PM Subject: Re: [WISPA] Wireless Security biting you in the ass? Great questions, Marlon! You are correct that it is application/data encryption

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread John Scrivner
It does not matter if the responsibility is the network admin or not when it comes down to purchase time. It comes down to perception. Right now perception of the hospital corporate officers is that wireless = not secure. I have been told by people who order circuits that they are not allowed

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread John Scrivner
On Mon, 27 Nov 2006 [EMAIL PROTECTED] wrote: HIPPA compliance should beUp to the network administrator. Not the carrier IMHO. This is not a matter of opinion. It is factual. I never doubted this. I just need to find someway to make the corporate people believe they can use my wireless

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Butch Evans
On Mon, 27 Nov 2006, John Scrivner wrote: I never doubted this. I just need to find someway to make the corporate people believe they can use my wireless transport to deliver an end to end solution that will be HIPAA compliant with my service located in the center. Passing the buck is not the

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Butch Evans
On Mon, 27 Nov 2006, John Scrivner wrote: Wireless broadband security issues have now officially led to my business being put into a bad light due to perceived lack of security. I am a member of a regional broadband planning group that is working with health care and other industry sectors to

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Peter R.
It is HIPAA - The Health Insurance Portability and Accountability Act. It covers way more than just encrypting data. Like Pat said, it is a process. Even paper records have to have a chain of command and security. So when you see the files in the reception area at your doctor's office, unless

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread cw
You're right. Perception is everything. So I picked up two things from this thread. One, why is the onus on me to prove my network is secure? Break into it or you're just passing on hot air from uninformed or biased sources. Two, I can offer transport on a private network that doesn't touch the

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Tom DeReggi
] To: WISPA General List wireless@wispa.org Sent: Monday, November 27, 2006 8:34 PM Subject: Re: [WISPA] Wireless Security biting you in the ass? You're right. Perception is everything. So I picked up two things from this thread. One, why is the onus on me to prove my network is secure? Break

Re: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Peter R.
Back to your problem: Wireless = Unsecure. You have a Marketing problem. The onus is on you to get him to tell you why your network is unsecure. Objections are made to be hurdled, after all. Explaining that cable and DSL are LAN based topologies is not going to help you. You need describe

RE: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Mac Dearman
Scriv, I carry 2 hospitals and 4 clinics in N. Louisiana and are their primary internet connections. We had this discussion last year and a simple VPN from their router to my core router was more than sufficient to meet HIPPA guidelines. HIPPA compliance is a very vague area! Mac Dearman

RE: [WISPA] Wireless Security biting you in the ass?

2006-11-27 Thread Rick Smith
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mac Dearman Sent: Tuesday, November 28, 2006 12:29 AM To: 'WISPA General List' Subject: RE: [WISPA] Wireless Security biting you in the ass? Scriv, I carry 2 hospitals and 4 clinics in N. Louisiana