HIPAA Consultants and Vendors

Ascension Health HIPAA Web Site
Maintained by Don Stry, Information Services Division
(812) 228-2131 Email: dstry@ascensionhealth.org

Section: HIPAA Products and HIPAA Consultants
Updated 08/28/02

CREDANT Mobile Guardian

ADDRESSING HIPAA REQUIREMENTS BY PROVIDING SECURITY FOR MOBILE DEVICES INCLUDING PDA’S AND LAPTOPS

The advantages of mobile/wireless computing for healthcare are striking – improved data collection, accurate and timely data, point-of–care data access, faster reimbursement – and the list continues. Yet security concerns remain a significant barrier to greater adoption especially in light of the upcoming HIPAA compliance dates that have been fueled by breaches of health privacy, such as press disclosures of individuals' health status, network hacking incidents, and misdirected patient E-mails.

Typically unknown to IT, the medical staff often imports mobile devices including PDA's and laptops into the healthcare environment, placing new pressure on access controls, encryption and policy enforcement. These devices are routinely used to collect, store, retrieve, display, and transmit healthcare data and are particularly vulnerable to being lost or stolen.

Containing sensitive healthcare information and providing access to corporate networks, the threat associated with un-secured devices must be addressed immediately. Without adequate mobile security policies, enforcement, and management tools, organizations will not be able to keep pace with their growth and will increasingly be exposed to security breaches and HIPAA liabilities.

TRUSTED COMPUTING FOR THE MOBILE ENTERPRISE

Protecting the mobile enterprise, CREDANT Mobile Guardian is the first security solution to address an organization’s HIPAA mobile security issues with centrally managed policy administration and strong on-device policy enforcement.

Providing policy-based and centrally managed security for mobile devices, CREDANT Mobile Guardian appeals to healthcare executives, IT security, auditors and mobile users. Why? No other mobile security solution provides the on-device security, ease of use and implementation, and reduced cost of ownership that CREDANT Mobile Guardian offers.

CREDANT MOBILE GUARDIAN at a Glance

Access Control

·    Ensure only authorized mobile users gain access with on-device mandatory access control including policy enforced PIN and/or Password

·    Easily control what applications can be installed on the device and how the device is used

·    Authenticated on device self-service PIN/Password reset

Audit Controls

· Automatically detect and govern synchronization software

· Audit logs for reporting

· Dynamically identify and track mobile devices throughout the enterprise

Entity Authentication

· Mutually authenticate synchronization to validate user, device and synchronization platform

· Impose event-driven fail-safe actions if a mobile device is lost or stolen

Encryption

· Assure information confidentiality by encrypting information stored on mobile devices and
removable mobile media using industry standards

· Encrypted data is administrator recoverable

Other Administration Benefits

· Phase deployment based on priorities and resources

· Centralize security policy creation and publication from a single management console

· Automatically distribute mobile device software and security policies

CREDANT Mobile Guardian provides a scalable, mobile enterprise security infrastructure that enables an organization to easily deploy, secure, and centrally manage disparate mobile devices throughout an enterprise. CREDANT Mobile Guardian’s mobile device client controls all activity in either a connected or disconnected state. Comprised of three easy-to-use components that interoperate seamlessly, CREDANT Mobile Guardian includes:

CREDANT Mobile Guardian Shield provides on-device enforcement of security policies, multiple levels of authentication and self-service password reset. CREDANT Mobile Guardian Shield policies can include mandatory access control, authorization and encryption to maximize healthcare information protection

CREDANT Mobile Guardian Gatekeeper automatically detects synchronization software, governs its usage and mutually authenticates user synchronization. Reducing the risk of unauthorized access to corporate resources, and improving productivity, CREDANT Mobile Guardian Gatekeeper eliminates the need to manually provision each mobile device by automating the distribution of CREDANT Mobile Guardian Shield and a mobile user's specific security policies.

CREDANT Mobile Guardian Enterprise Server provides centralized security management, role-based policy creation, auditing and reporting. This secure, web-based administration solution reduces the administration burden on IT by inheriting existing groups and users from LDAP directories without schema changes, enabling an organization to easily manage many different mobile users, devices and operating systems from a single interface.

Technical Specifications

CREDANT Mobile Guardian

Enterprise Server Platforms:

· Microsoft Windows 2000 Server

· Microsoft Windows 2000 Advanced Server

CREDANT Mobile Guardian Gatekeeper Platforms:

· Microsoft Windows XP

· Microsoft Windows 2000 Professional

· Microsoft Windows Workstation NT 4.0

CREDANT Mobile Guardian Shield Platforms:

· Palm O/S 3.5 & above on Palm, Sony, etc.

· PocketPC 2000 & 2002 on Hewlett Packard IPAQ & Jornada 500 Series, Casio, etc.

About CREDANT TECHNOLOGIES

CREDANT TECHNOLOGIES, headquartered in Dallas, Texas, is the premier provider of security software for the mobile enterprise. CREDANT Mobile Guardian enables organizations to easily and cost-effectively govern and secure disparate mobile devices with centrally managed, policy-based security. For more information contact one of the following Account Executives:

Al Dankovich, Central US

815-462-9508 adankovich@credant.com

Jeff Gray, Eastern US

703-476-7290 jgray@credant.com

Tom Gore, Southern US

972-458-5402 tgore@credant.com

Marshall Jackson, Western US

650-917-0649 mjackson@credant.com

David Hosch, Canada

905-508-6743 dhosch@credant.com

Corporate 1-866-273-3268 info@credant.com

Call 815-462-9508 or 1-866-CREDANT (273-3268) or email adankovich@credant.com for an immediate response.