Home > IT Answers > CIO > Compliance to Acts
Rohitmagazine
0 pts.
 Compliance to Acts
Compliance, CRM, Disaster Recovery, Laws, Policies, Regulations, Risk management, Security Program Management, standards
How can softwares for url/content filtering or mail scanning be made compliant to HIPAA , Sarbanes-oxley act etc. ... What all features are required to be implemented to make them compliant ????

Software/Hardware used:
ASKED: March 2, 2007  9:55 AM
UPDATED: March 3, 2007  1:30 PM
RELATED QUESTIONS
Answer Wiki:
I'm a little confused by the wording of your query. Are you asking this question as a developer of compliance-enforcement software? Are you asking as someone who needs to implement a solution and you are looking for software names or configuration information? General directions to go in (since I'm not sure what you're looking for) would be: Email transfers of attachments are a possibility. When you say "URL filtering" do you mean outgoing web requests? Or do you mean outsiders probing your web servers for confidential data? If you reply (to everyone, not just me) with more details about what you're looking for we (as a group) may be better able to help you. Bob
Last Wiki Answer Submitted:  March 2, 2007  3:15 pm  by  Bobkberg   1,070 pts.
All Answer Wiki Contributors:  Bobkberg   1,070 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 

Thanks bob ….

Actually i am looking the compliance from a developers perespective … I have a product that implements Url/content filtering(outgoing web requests) as well as mail scanning(incoming/outgoing) ….
I want to make it compliant to various acts as i have mentioned in my previous question ????

I hope this clarifies my question ???

Rohitmagazine
 0 pts.
 

Right off, I did a quick google of “HIPAA” (Health Insurance Portability and Accountability Act)which came up with several sources http://www.hipaa.org among them.

SOX (Sarbanes-Oxley) is more of a financial responsibility and reporting law. Its primary focus as far as data is on retention of records (email, instant messages, databases, etc.) for the purpose of potential prosecution/disclosure.

Since you only specifically mentioned those two, and only alluded to others (COPPA, FERPA, and others) I’m wondering how much research you’ve done yourself on these subjects. There is a LOT of free information available on public laws – much of it from the governmental organizations charged with enforcing them.

However, I’ve tried to point you in some useful directions.

Good luck,

Bob

Bobkberg
 1,070 pts.