Home page logo

basics logo Security Basics mailing list archives

Healthcare Standards and Regulations
From: Jason Kolpin <jasonk () ncat org>
Date: Wed, 14 Apr 2010 16:22:13 -0600


I have been approached by a small medical practice to build an infrastructure from the ground up. After some research I decided I knew nothing about best practices and such in this environment, these folks are in a rural area and have no clue who to contact, I am at a loss as well other than a big company like Seimans or something. It would be greatly appreciated if anyone on this list knew of a place where I could get some solid information on this subject, refer these folks to a company that does this sort of thing, or offer some advice for a situation such as this. It's not like I am completely clueless concerning server setup and stuff like that, I work IT, I am more interested in security related information such as typical physical layout for the network, IE firewalling and data/service separation issues.

Excuse my ignorance here as this is completely new to me.
I have been asked about LIS, RIS, PM, patient records server, scheduling/calendar, billing, email server, domain controller, VPN from two locations and some more. I'm just looking for some simple "stick man" drawings of a typical physical layout using this type of stuff, as well as a place I might go to find out about required/mandated policies and such, and even a few hints on policies you may know that you find important in a situation such as this.

FYI I have already informed these people I am not the man for the job as the risk is too great for me should something bad happen but they are probably going to use me as a consultant, they have no IT staff and are completely clueless about how the simplest of things work.

I know this is a lot to ask of a mailing list so no surprise if I get no response.

Jason Kolpin
Web Specialist
National Center for Appropriate Technology

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]