Tag Info

New answers tagged

0

You can use the attachment feature in saving password in Keepass to store your files highly-encrypted, but Keepass or other software solutions like Lastpass have the risk of being a single point of failure! The protection of all information depends on keeping one master password safe. If you forget it or someone sniffs your master password, all will be ...


1

The original question asked whether the VPN or wireless is in scope for the ISMS. Before that can be answered, we need to ensure that we have completed clauses 4.1 and 4.2 of the 2013 version of the standard. They help you define the scope and the information which needs to protected. Only then, can you look at things like VPNs and wireless access points. ...


2

PHI means having any piece of identifying information linked with any type of clinical data -- e.g. a diagnosis, CPT code, etc. Therefore, an internal patient identifier on its own is not considered PHI. The release of a simple internal identifier is not a breach, nor is it in violation of any HIPAA regulations I am aware of. Once that identifier can be ...


1

Disclaimer: I Am Not A QSA; I Am Not A Lawyer My question is, if I wanted to offer similar service (i.e. make purchases on behalf of consumers with their cc info), must I (/are they?) be PCI compliant? Or, is it simply enough to (1) use SSL on my site and (2) never write CC info to my DB? Yes, you would need to be PCI compliant. You would be ...



Top 50 recent answers are included