HIPPA Compliance Overview

The Health Insurance Portability and Accountability Act (HIPAA) governs the security of electronic protected health information (ePHI).  Organizations needing to comply with HIPAA are required to have systems and processes in place across their IT infrastructure that ensure the confidentiality and protection of ePHI. In particular, HIPAA’s Technical Safeguard Standard and the Privacy section of the HITECH Act mandate that IT systems storing ePHI must be protected from intrusion. Regulated organizations must also keep written records documenting those protections, as well as any changes to their protection regimes.

How xyberShield Drives Compliance

xyberShield directly addresses many of the ePHI requirements of HIPAA and the HITECH Act, by:

  • Protecting your web applications 
    xyberShield provides protection for your website against 12 web application threat categories, including SQL injection, cross-site scripting, OWASP application vulnerabilities, and zero day attacks dramatically reducing the risk of data breaches resulting from compromised web applications.
  • Monitoring access 
    xyberShield monitors and documents all the configurations of and changes to the protection of your website, tracks administrator activity, and identifies inactive accounts.
  • Maintaining an audit trail 
    xyberShield’s reports provide clear, thorough documentation of all threats to your website and how they were handled, application security settings and changes, and all administrator actions – all of which address key HIPAA requirements.


The xyberShield Compliance Advantage

xyberShield is the most effective way to secure ePHI data breaches due to compromised web applications, offering:

  • Always-ready functionality 
    xyberShield continually learns about the behavior of the users and the applications on your website. It adapts so your website always has the best possible protection, making it easier to stay in compliance.  There is no need to continually re-tune and re-configure to maintain your compliance as is the case with traditional WAFs.
  • Effective virtual patching 
    xyberShield is a fast, efficient way to address the period of vulnerability during remediation efforts to rewrite or patch errors in application code.
  • Ease of deployment 
    Thanks to our software-as-a-service (SaaS) architecture, xyberShield offers easier installation (installation takes about an hour) and lower TCO than other web application security options.