Compliance
HIPAA
HIPAA is the United States law that protects sensitive patient health information.
What it is
The Health Insurance Portability and Accountability Act, through its Security Rule, requires safeguards for electronic protected health information (ePHI). That includes a risk analysis and ongoing evaluation of technical vulnerabilities.
Background
HIPAA is administered by the U.S. Department of Health and Human Services (HHS). It applies to covered entities such as healthcare providers and health plans, and to their business associates.
How EthicalStrike helps
EthicalStrike supports the Security Rule risk-analysis and evaluation requirements by regularly testing systems that handle ePHI and mapping findings so you can prioritise and evidence remediation.
EthicalStrike supports your compliance efforts by testing your network and mapping findings to this framework. It is not a substitute for formal certification or an audit by an accredited body.