Preparing To Practice - IT
14
Presentation by Ofer Shimrat Preparing to Practice Computers & IT April 19, 2008
description
Change default passwords & document Leave default passwords or no document UPS Battery Backup with USB connection Surge Protector or plain power strip
Transcript of Preparing To Practice - IT
Presentation by Ofer Shimrat
Preparing to PracticeComputers & IT
April 19, 2008
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
2
Introduction
Health Insurance Portability & Accountability ActMedical Applications determine your needsNetwork Architecture & Types of NetworksWired Network or Wireless NetworkDesktop Hardware & Software RecommendationsServer Hardware & Software RecommendationsNetwork Hardware & Software RecommendationsNetwork and Computer SecurityBackup Strategies and Disaster RecoveryInsurance to protect your computer assetsProductivity and Feature-Rich EnhancementsComputer Best Practices and Conclusion
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
3
HIPAA Compliance
Health Insurance Portability and Accountability ActEnacted August 21, 1996Applies to Health Plans, Providers & ClearinghousesProtects all “individually identifiable health information”Mandates patient record privacy in any transaction– Electronic– Paper– Oral
Requires written security standards & proceduresStaff must understand security logic“Minimum necessary” use & disclosureAppointment of a security managerInventory and catalog all “exposed” IT componentsSanctions for security policy violationsOnly as effective as your weakest link
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
4
Software determines what hardwareSmall or Solo PracticeMedium Size PracticeLarge PracticeElectronic Health Record (EHR) or EMR systemMedical management systemsMedical equipment applicationsMedical imaging applicationsAppointment Scheduling systemsElectronic patient charts & scanningBilling applicationsOffice productivity applicationsWireless hardware applications
Medical Software Applications
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
5
Network Topology
Less expensiveNot scalableSlowerNo central controlMore maintenanceFragmented Backup
More expensiveScalableFasterCentral managementLess maintenanceCentralized Backup
Peer-To-Peer Network Client/Server Network
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
6
Wired or Wireless
Wired– Faster (10/100/1000 Mbps)– More secure– Always on and connected but more preparation– Professionally installed same time as Telco wiring– Use CAT 5e or CAT 6 Ethernet cabling– Concentrate to patch panel and label clearly– Wire enough drops for the future office needs– Diagram & document your office wiring
Wireless– Slower (11/22/54/108/125/240 Mbps)– Less secure– May have blind spots but more convenient– Wi-Fi 802.11 a / b / g / n / i standard– Bluetooth standard– Use encryption with password protection
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
7
Desktop Hardware & Software
YES NO
MS Windows XP Professional SP2 MS Windows XP Home EditionMS Windows Tablet PC Edition SP2 MS Windows XP Media Center EditionMS Windows Vista Business SP1 MS Windows Vista HomeMS Office 2003 SP3 or MS Office 2007 SP1 Open Source, Star Office, CorelCommercial software with tech support Unsupported shareware without helpIntel Core 2 Duo or Core 2 Quad processor Intel P4 or AMD processors2,048 MB (=2 GB) of RAM or more 256 MB of RAM or lessSATA II hard drive >= 80 GB PATA or EIDE hard drive of any sizeTFT flat screen >= 19 inch diagonal CRT monitor of any sizeUSB 2.0 or Firewire 400/800 ports USB 1.1 ports or No USB portsPower Supply >= 410 watts V 2.2 Power Supply < 250 wattsDVD-RW dual layer and CD-RW CD ROM2 or more expansion slots 1 or no expansion slotsExtended parts/labor warranty No warranty or closeout sale
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
8
Server Hardware & Software
The heart of your network & greatest IT assetProfessionally installed/configured/maintained64 bit server grade hardware componentsServer grade chassis & expansion slotsRedundant power supplies and cooling fansRedundant Array of Independent Disks (RAID)Extended warranty & replacement serviceMS Windows 2003/2008 Server (various editions)
MS Exchange 2003/2007 (various editions)
MS Windows Small Business Server 2003 (2 editions)
Security groups & privilegesIntranet, Internet & ExtranetRemote login, server resources & privileges
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
9
Network Hardware & Software
YES NO
Network Switch Network HubSeparate Wired/Wireless devices All-In-One Wired/Wireless deviceUPS Battery Backup with USB connection Surge Protector or plain power stripLaser printer with network connectivity Inkjet printer with local connectivityCable modem, DSL modem, T1 Dial Up account or ISDNDocument Scanner/Fax with ADF tray Portable single sheet scannerNetwork based fax for all users Single line modem for one userHardware Firewall Software Firewall or No Firewall128 bit wireless encryption with passkey No wireless encryption and no passkeyChange default passwords & document Leave default passwords or no documentFill out warranty registration & send Throw away warranty cards or ignoreProfessionally installed cabling with jacks Cables on floor or hanging from ceilingAir conditioned facilities & air flow Heaters next to computer equipment
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
10
Security Hardware & Software
Hardware Firewall applianceAnti-Virus software or hardware equivalentAnti-Spam software or hardware equivalentAnti-Spyware software or hardware equivalentAuthenticated user security & passwordsEncryption software or hardware equivalent
INTERNET
Anti-VirusAnti-Spam
Anti-SpywareSERVER
Firewall
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
11
Backup & Disaster Recovery
Data as your most important assetNightly Backups with verify logsFull, Differential, Incremental backupsRotation of backup devicesOn-line, On-Site and Off-Site rotationRecommend external USB/eSATA drivesBackup or Image Backup SoftwareVolume Shadow CopyOperational Backups & RestoresDisaster RecoveryBackup, Backup, Backup
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
12
Insurance
Inventory & catalog all IT components (HIPAA)
Send copy to Insurance Agent/Head OfficeInland Marine CoverageFlood InsuranceFiled class and Non-filed class coverageBusiness Interruption CoverageSprinkler Systems & Smoke AlarmsTheft versus BurglaryUser alarm codes and monitoringUmbrella Policies
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
13
Productivity and IT
P – Purpose of the communicationA – Action and dues datesS – Supporting documentationS – Summary in subject
• Delete It• Do It• Delegate It• Defer It
• Voice-Mail • E-Mail • Meetings• Memos • Phone calls
• Communication channels (devices) employed in the organization • The preferred communication method for specific scenarios • The type of information appropriate for each channel (device) • Response time guidelines, base on the communication method
Adapted fromMcGhee Productivity Solutions
HIPAA Compliance
Introduction
Medical Applications
Network Topology
Wired or Wireless
Desktop H/S
Server H/S
Network H/S
Security H/S
Backup & DRInsurance
Conclusion
Productivity
14
Be HIPAA compliantSoftware determines what hardwareUnderstand your network topologyChoose hardware with the future in mindBackup, be secure, redundant & insured
Conclusion
Ofer ShimratTEL: (858) 569-0300FAX: (858) 569-0303EML: [email protected] URL: www.soundoffcomputing.com
