We are HIPAA Compliant.
HIPAA legislates the security of
electronically protected health information to be implemented by health plans,
health care clearinghouses, and certain health care providers. It describes the
adoption of national standards for safeguards to protect the confidentiality,
integrity, and availability of electronically protected health information. The
security rule of HIPAA requires that covered entities have appropriate
Administrative Procedures, Physical Safeguards, and Technical Safeguards to
protect access to protected health information. Compliance with the security
rule will be required by April 21, 2005. Service from an offsite backup service
provider such as us is an excellent way to fulfill HIPAA legislation and become
compliant.
Encryption:
Our system supports AES, 3DES and
Two Fish encryption algorithms to protect your data.
As of 2005, no successful attacks
against AES have been recognized. The National Security Agency (NSA) reviewed
all the AES finalists, including Rijndael, and stated that all of them were
secure enough for US Government non-classified data. In June 2003, the US
Government announced that AES may be used for classified information:
"The design and strength of all
key lengths of the AES algorithm (i.e., 128, 192 and 256) are sufficient to
protect classified information up to the SECRET level. TOP SECRET information
will require use of either the 192 or 256 key lengths. The implementation of AES
in products intended to protect national security systems and/or information
must be reviewed and certified by NSA prior to their acquisition and use."
This marks the first time that
the public has had access to a cipher approved by NSA for TOP SECRET
information. It is interesting to note that many public products use 128-bit
secret keys by default; it is possible that NSA suspects a fundamental weakness
in keys this short, or they may simply prefer a safety margin for top secret
documents (which may require security decades into the future). “
Warning:
You will NOT be able to restore any data without the user passphrase (login name
and password) and
Florida Remote Backup Service will not be able to recover the
passphrase if it is lost. We strongly recommend that our customers securely store this information
offsite in at least two locations.
|