HIPAA Audits
The Health Insurance Portability and Accountability Act
of 1996 (Public Law 104-191), also known as HIPAA, is
not a "technology law", but it has significant implications
for the way in which organizations manage health care
information because it creates stringent protection requirements
for patient data and holds violators of the Act accountable
for mishaps. KeyCrest can audit your medical systems and
determine whether you are in violation of the law, as
well as recommend measures to achieve compliance.
PDD-63 and regulatory compliance
Presidential Decision Directive 63 prescribes ways in
which the nation's critical infrastructure will be protected.
All government agencies and many other organizations must
follow PDD-63 and related guidance. KeyCrest consultants
have significant experience with security actions needed
to maintain regulatory compliance. We can help you determine
what regulations apply to your environment and recommend
compliance measures.
Privacy Act compliance
There are dozens of public laws that regulate how information
must be protected and safeguarded. These include the most
well-know Privacy Act of 1974, which is a "code of fair
information practices" that regulates the collection,
maintenance, use, and dissemination of personal information
by federal government agencies. There are related regulations
that apply to non-federal agencies and to commercial organizations.
KeyCrest can help you assess whether any aspect of your
infrastructure threatens compliance with any of this legislation,
and can take steps to ensure that your information is
managed with individual privacy in mind.
Accessibility (Section 508) compliance
Section 508 of the Rehabilitation Act of 1998 requires
that Federal agencies' electronic and information technology
be accessible to people with disabilities. Section 508
establishes requirements for electronic and information
technology developed, maintained, procured, or used by
the government. KeyCrest consultants have done numerous
508 assessments, and can help you revise your technology
and systems to comply with the law.
