Administrative security includes the audits, policies, staff training, and, for HIPAA-specific requirements, business associate training. Equally important as ensuring the physical and technical security of your data environment, administrative security addresses the business-facing concerns of partnering with a third-party hosting provider.
If you collect, store or process credit cardholder data, you are required to meet PCI DSS compliance. With PCI, you are required to ensure third-party/service providers that may have an impact on the security of the cardholder data environment are able to meet compliance standards.
If you collect, store or process patient health data, you are required to meet HIPAA compliance. With HIPAA, you are required to comply with the Administrative Safeguards within the HIPAA Security Standards that apply to:
(i) The size, complexity, and capabilities of the covered entity.
(ii) The covered entity's technical infrastructure, hardware, and software security capabilities.
(iii) The costs of security measures.
(iv) The probability and criticality of potential risks to ePHI.
Online Tech can provide the administrative security you need in the form of contractual requirements, staff training and documented policies and procedures.
| Administrative Security Service | |
|---|---|
|
Audits and Reports |
|
Policies |
|
Staff Training |
|
Business Associate Training |
