| In the recent past many new laws and regulations have been enacted around the security, accessibility, privacy, and retention of information. These new laws and regulations not only affect the healthcare and financial industries in particular, but reach all industries that maintain private information pertaining to employees and clients.
KITS effective and secure offsite backup enables compliance with these privacy laws through automated, encrypted offsite backup. Follow the links below for more information on these compliance issues and KITS solutions that address them:
Gramm-Leach-Bliley Act of 1999 – Protects consumer’s financial private information.
HIPAA – The Health Insurance Portability and Accountability Act of 1996
Sarbanes-Oxley – The Sarbanes-Oxley (SOX) Act of 2000
|
Compliance Problems in legacy solutions
|
KITS Backup Solution
|
| Tape backups require manual intervention and physical handling of media that are not compliant with HIPAA and GLBA. |
KITS automated backup and recovery solution eliminates the need for manual intervention and media handling. |
| Data on tapes are often not encrypted, violating fundamental privacy requirements. When tapes are lost, data from tapes can be retrieved by anyone! |
KITS software encrypts data on your server before transmitting it. The data remains encrypted on KITS data centers. It can only be decrypted on your systems by providing the encryption key known only to you. |
| Legacy solutions require extensive processes and procedures to be followed and recorded to comply with an audit. |
KITS backup solution provides centralized management and simplified process that makes audit easier and faster. |
KITS Backup is ideal for Regulatory Compliance
KITS automated offsite backup is ideally suited for regulatory compliance without having to implement elaborate procedures and spending precious IT dollars in expensive hardware and software. The automation and encryption built into our solution painlessly enables our clients to comply with privacy regulations.
So, why should you choose Kelley Information Technology Services as your Backup Service Provider?
World Class Support
KITS certified engineers provide dedicated technical support during normal business hours, 8 am – 5 pm CST. 24×7 on-call emergency support is also available via our emergency paging services.
Instant, Offsite Backup
The fully automated process backs up every machine you choose to protect, using your existing internet connection. Your data is securely stored offsite in encrypted format.
Data Security
Advanced security and authentication algorithms, including AES encryption, ensure the safety and confidentiality of your data at all times.
Local Copies Available for Quick Restores
Combined with offsite backup, this provides the best of both worlds – giving you the ability to restore files even if your internet connection is down.
The Most Reliable Technology Available Today
Remote online data backup eliminates tape and human error.
KITS Backup Solution is packed with all the enterprise quality features you would expect from a full-service backup solution including:
How does KITS remote backup help me comply with the HIPAA security and privacy rules?
Encryption of data during backup:
All data being backed up is encrypted with 448-bit Blowfish encryption prior to transfer and sent through a secure 128-bit SSL tunnel to the KITS datacenter.
Encryption of data on KITS’ servers:
All backed up data maintains the 448-bit Blowfish encryption while stored “at rest” in the KITS datacenter.
Physical security:
KITS servers are located in a Tier 4 datacenter protected by gated perimeter access, 24 x 7 x365 on-site staffed security and technicians, electronic card key access, and strategically placed security cameras inside and outside the building.
Remote/offsite backup:
KITS is an automated remote or offsite backup and a key component in any disaster recovery plan as protection against hardware failure, theft, virus attack, deletion, and natural disaster.
Private and public encryption keys:
Users have a choice of using a KITS generated 448-bit key or managing their own private key to encrypt their data.
Logical access:
Backed up data may be accessed via the password protected, web-based KITS administrative console by supplying a valid encryption key.
Written contingency plan:
The HIPAA Security rule requires that covered entities have a written contingency plan for responding to system emergencies, including a detailed plan concerning the data backup and recovery process in the event of a disaster.
Note:
There is no standard “HIPAA certificate of compliance” for backup software and services. For more information about HIPAA and HIPAA compliance, contact your legal counsel or refer to the HIPAA section of the U.S. Department of Health and Human Services’ website: http://www.hhs.gov/ocr/hipaa/ |