A Slice of the Cloud specializes in secure environments structured for ongoing, optimized compliance with HIPAA/HITECH regulations, specifically in regard to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule.
Security
A Slice of the Cloud utilizes industry-recognized security standards for HIPAA compliance:
- Multiple layers of protection to help keep electronic protected health information(ePHI) secure and stable
- Limits and monitors all access to ePHI
- Defends against and mitigates multiple cyber assaults and threats
- Includes firewall and router configurations built and maintained specifically for HIPAA compliance
- Utilizes industry best practices for installation, configuration and patch installation of managed servers and associated network devices to meet HIPAA compliance demands
Flexibility
A Slice of the Cloud’s HIPAA-compliant platforms work to accommodate each customer’s unique business and technical constraints within the highly-regulated healthcare industry. With our customized solutions, we can tailor our services to meet customers’ specific topology and service-level needs, enabling them to meet the stringent requirements of their respective end users.
Our HIPAA-compliant cloud-computing platform is available with the following options:
- A public-like cloud model which, when combined with select A Slice of the Cloud managed services, can meet some of the HIPAA security requirements for protecting ePHI.
- A dedicated private server solution designed to the customer’s exact specifications including availability, scalability and threat prevention.
- A virtual private server, deploying resource pooling that combines reliable, logical segmentation and best practices with the agility and cost efficiency of multi-tenancy.
- A Disaster Recovery as a Service (DraaS) solution that ensures and delivers rapid recovery of mission-critical applications and data.
Infrastructure
A Slice of the Cloud’s HIPAA-compliant cloud platform features a robust infrastructure, which includes best-in-class technologies and secure, geographically-diverse data centers for increased stability and recovery services.
Around-the-clock Support
Our service team complements our HIPAA-compliant cloud platform with 24/7/365 technical support to maximize uptime and availability and deliver enhanced security at all times. We provide ongoing staff training on the latest security protocols, as well as in current facilities and resource management.
Managed Services
While many of the requirements for HIPAA compliance are solely the responsibility of health providers, organizations and agencies that meet the definition of a “covered entity” under HIPAA, A Slice of the Cloud’s consulting team can also work with our customers to design and develop solutions for meeting specific safeguards required by the Security Rule.
A Slice of the Cloud combines its ability to run HIPAA-compliant workloads in this secure cloud environment with our slate of managed security services to further assist customers with the technical complexities of the HIPAA regulations. These managed services include:
- Firewall
- Intrusion Detection and Prevention System (IDPS)
- SSL and IPSec VPN
- Multi-Factor Authentication
- Internal Vulnerability Scanning
- External Vulnerability Scanning
- Web Application Firewall (WAF)
- File Integrity Monitoring (FIM)
- Security Event Log Management (SELM) and MonitoringÂÂ
In addition, A Slice of the Cloud provides our customers our annual audit report of healthcare information privacy controls (AT 101) for data center operations.
Audit-ready
A Slice of the Cloud is audit-ready as our customers need assistance in meeting HIPAA-HITECH regulatory demands, as well as these regulatory needs:
- SSAE 16
- Food and Drug Administration
- Payment Card Industry (PCI) Data Security Standard (DSS)
- European Commission’s Directive on Data Protection (“Safe Harbor”)
- Sarbanes-Oxley (SOX)
- ISO 27001
- Gramm-Leach-Bliley (GLBA)
To learn more about HIPAA, visit the U.S. Department of Health and Human Services (HHS) web site at: http://www.hhs.gov/ocr/privacy/index.html
