Comments for Cisco Security http://ciscosecurity.wordpress.com Thu, 12 Jul 2007 15:11:32 +0000 http://wordpress.com/ hourly 1 Comment on HIPPA Audit Riles Health IT by dmdcissp http://ciscosecurity.wordpress.com/2007/06/21/hippa-audit-riles-health-it/#comment-40 dmdcissp Thu, 12 Jul 2007 15:11:32 +0000 http://ciscosecurity.wordpress.com/2007/06/21/hippa-audit-riles-health-it/#comment-40 Thank you for the Washington post article.....very informative, which still leads me to ask, what does the Office of Civil Rights know about health care? Since they are now starting to include HIPPA reviews as part of the JACHO audits, I am sure that the hospitals are asking the same question. Thank you for the Washington post article…..very informative, which still leads me to ask, what does the Office of Civil Rights know about health care?

Since they are now starting to include HIPPA reviews as part of the JACHO audits, I am sure that the hospitals are asking the same question.

]]> Comment on HIPPA Audit Riles Health IT by omarv http://ciscosecurity.wordpress.com/2007/06/21/hippa-audit-riles-health-it/#comment-37 omarv Thu, 12 Jul 2007 06:34:26 +0000 http://ciscosecurity.wordpress.com/2007/06/21/hippa-audit-riles-health-it/#comment-37 dmdcissp, From what I can tell this is still the case. I looked it up in wikipedia at http://en.wikipedia.org/wiki/HIPPA which led me to a June 2006 Washington Post article http://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html that says" "...the Department of Health and Human Services' Office of Civil Rights, which is in charge of enforcing the law." I also found this website that says it is the Secretary of HHS that can impose HIPPA fines. http://www.hhs.gov/ocr/moneypenalties.html dmdcissp,

From what I can tell this is still the case.
I looked it up in wikipedia at http://en.wikipedia.org/wiki/HIPPA
which led me to a June 2006 Washington Post article http://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html
that says”

“…the Department of Health and Human Services’ Office of Civil Rights, which is in charge of enforcing the law.”

I also found this website that says it is the Secretary of HHS that can impose HIPPA fines.

http://www.hhs.gov/ocr/moneypenalties.html

]]> Comment on HIPPA Audit Riles Health IT by dmdcissp http://ciscosecurity.wordpress.com/2007/06/21/hippa-audit-riles-health-it/#comment-32 dmdcissp Wed, 11 Jul 2007 14:13:22 +0000 http://ciscosecurity.wordpress.com/2007/06/21/hippa-audit-riles-health-it/#comment-32 I used to be the I.S.O. for one of the major pediatric facilities on the East Coast, so I had been involved with HIPPA for quite some time..... The question that always came up was "Great, we have HIPPA, who is the regulatory body that would enforce the rules?" At that time, the Office of Civil Rights was named as that regulatory body. I am now wondering if that is still the case...... I used to be the I.S.O. for one of the major pediatric facilities on the East Coast, so I had been involved with HIPPA for quite some time…..

The question that always came up was “Great, we have HIPPA, who is the regulatory body that would enforce the rules?”

At that time, the Office of Civil Rights was named as that regulatory body.

I am now wondering if that is still the case……

]]> Comment on Computer hackers steal Carson funds by Steve Davis http://ciscosecurity.wordpress.com/2007/06/07/computer-hackers-steal-carson-funds/#comment-9 Steve Davis Mon, 11 Jun 2007 20:24:35 +0000 http://ciscosecurity.wordpress.com/2007/06/07/computer-hackers-steal-carson-funds/#comment-9 Another key aspect of our S-Series appliance that would have caught this security breach is the "Layer 4 Traffic Monitor." This is like a wire-tap for spy-ware trying to phone home. All spyware has phone-home capabilities: sending home the data captured from keystroke logging, updating a spam zombie, etc. Most people have no idea that they have been infected because, unlike viruses, spyware actively tries to go undetected. The S-Series appliance will analyze all outbound web traffic for infected machines trying to "phone-home." A report is created letting the administrator know which machines are infected, what data they are trying to send, and where they are sending it. I am not aware of any other gateway appliance that does this. Another key aspect of our S-Series appliance that would have caught this security breach is the “Layer 4 Traffic Monitor.” This is like a wire-tap for spy-ware trying to phone home.

All spyware has phone-home capabilities: sending home the data captured from keystroke logging, updating a spam zombie, etc. Most people have no idea that they have been infected because, unlike viruses, spyware actively tries to go undetected.

The S-Series appliance will analyze all outbound web traffic for infected machines trying to “phone-home.” A report is created letting the administrator know which machines are infected, what data they are trying to send, and where they are sending it. I am not aware of any other gateway appliance that does this.

]]> Comment on Bank pays over hacked accounts by Cisco Security http://ciscosecurity.wordpress.com/2007/04/10/bank-pays-over-hacked-accounts/#comment-8 Cisco Security Sat, 26 May 2007 18:34:09 +0000 http://ciscosecurity.wordpress.com/2007/04/10/bank-pays-over-hacked-accounts/#comment-8 <strong>Bank pays over hacked accounts</strong> The Dutch bank ABN Ambro (which is planning to be merge with Barclays) has compensated four of its customers.. Bank pays over hacked accounts

The Dutch bank ABN Ambro (which is planning to be merge with Barclays) has compensated four of its customers..

]]> Comment on Securing the Deal: 10 Ways to Add Security to the Deal.. by Cisco Security http://ciscosecurity.wordpress.com/2007/04/13/securing-the-deal-10-ways-to-add-security-to-the-deal/#comment-7 Cisco Security Sat, 26 May 2007 17:59:03 +0000 http://ciscosecurity.wordpress.com/2007/04/13/securing-the-deal-10-ways-to-add-security-to-the-deal/#comment-7 <strong>Securing the deal: 10 Ways to add security to the deal</strong> I came across this embedded PowerPoint slideshow at eWeek.com with 12 simple slides about how to add security to any deal. Basic stuff, but a good reminder. Securing the deal: 10 Ways to add security to the deal

I came across this embedded PowerPoint slideshow at eWeek.com with 12 simple slides about how to add security to any deal. Basic stuff, but a good reminder.

]]> Comment on Thumb Drives Replace Malware As Top Security Concern by Cisco Security http://ciscosecurity.wordpress.com/2007/05/15/thumb-drives-replace-malware-as-top-security-concern/#comment-6 Cisco Security Sat, 26 May 2007 17:56:25 +0000 http://ciscosecurity.wordpress.com/2007/05/15/thumb-drives-replace-malware-as-top-security-concern/#comment-6 <strong>Thumb drives replace malware as Top security concern</strong> This article talks about a study that shows that thumb drives have become a top concern amongst IT managers. Thumb drives replace malware as Top security concern

This article talks about a study that shows that thumb drives have become a top concern amongst IT managers.

]]> Comment on Study: 45% Of Workers Steal Data When Changing Jobs by Cisco Security http://ciscosecurity.wordpress.com/2007/05/15/study-45-of-workers-steal-data-when-changing-jobs/#comment-5 Cisco Security Sat, 26 May 2007 17:54:41 +0000 http://ciscosecurity.wordpress.com/2007/05/15/study-45-of-workers-steal-data-when-changing-jobs/#comment-5 <strong>45% of works steal data when changing jobs</strong> Nearly half of professionals from across a wide range of industries admit they have taken data with them 45% of works steal data when changing jobs

Nearly half of professionals from across a wide range of industries admit they have taken data with them

]]> Comment on Security labs cannot cope with volume of internet threats by Cisco Security http://ciscosecurity.wordpress.com/2007/05/15/security-labs-cannot-cope-with-volume-of-internet-threats/#comment-4 Cisco Security Sat, 26 May 2007 17:52:42 +0000 http://ciscosecurity.wordpress.com/2007/05/15/security-labs-cannot-cope-with-volume-of-internet-threats/#comment-4 <strong>Security labs cannot cope with volume of Internet threats</strong> Panda labs is the latest security lab that has acknowledged that they are overwhelmed with the increase of malware Security labs cannot cope with volume of Internet threats

Panda labs is the latest security lab that has acknowledged that they are overwhelmed with the increase of malware

]]> Comment on People click on the darndest things by Cisco Security http://ciscosecurity.wordpress.com/2007/05/23/people-click-on-the-darndest-things/#comment-2 Cisco Security Sat, 26 May 2007 17:18:39 +0000 http://ciscosecurity.wordpress.com/2007/05/23/people-click-on-the-darndest-things/#comment-2 <strong>People will click on anything!</strong> A security researcher decided to test how gullible web surfers really were and created a Google advertisement that prodded people to click on it and get infected. People will click on anything!

A security researcher decided to test how gullible web surfers really were and created a Google advertisement that prodded people to click on it and get infected.

]]>