HIPAA-compliant Cloud

The Peak 10 HIPAA-compliant Cloud is a secure cloud environment structured to ease the burden on customers seeking HIPAA/HITECH compliance, specifically in regard to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule.

Secure

Employing industry-recognized security standards, the HIPAA-compliant Cloud:

• Features multiple layers of protection to help keep electronic protected health information(ePHI) secure
• Limits and monitors access to ePHI
• Defends against and mitigate cyber assaults and threats
• Includes firewall and router configurations built and maintained with HIPAA compliance in mind
• Employs industry best practices for installation, configuration and patch installation of managed servers and associated network devices

Flexible

The HIPAA-compliant Cloud is designed to accommodate each customer's unique business and technical constraints. Unlike off-the-shelf cloud solutions, it can be tailored to meet customers' specific topology and service level needs so they in turn can meet the demanding requirements of their end users.

The HIPAA-compliant cloud is available as:

• A public-like cloud model (the Peak 10 Enterprise Cloud) which, when combined with select Peak 10 managed services, can meet some of the HIPAA security requirements for protecting ePHI.
• A dedicated private cloud solution (the Peak 10 Private Cloud) that can be designed to the customer's exact specifications including availability, scalability and threat prevention.
• A virtual private cloud (the Peak 10 Private Cloud) via resource pooling that combines reliable, logical segmentation and best practices with the agility and cost efficiency of multi-tenancy.
• A Disaster Recovery as a Service (DraaS) solution (the Peak 10 Recovery Cloud) that ensures rapid recovery of mission-critical applications and data.

Infrastructure

The HIPAA-compliant Cloud is built on Peak 10's robust infrastructure, which includes best-of- breed technologies and secure, geographically diverse data centers.

24x7x365 Support

The Peak 10 HIPAA-compliant Cloud comes with round-the-clock technical support to help maximize uptime and availability and enhance security. The Peak 10 staff is continuously trained on the latest security protocols, as well as in current facilities and resource management.

Managed Services

While many of the requirements for HIPAA compliance are solely the responsibility of health providers, organizations and agencies that meet the definition of a "covered entity" under HIPAA, Peak 10 can also work with these customers to help devise solutions for meeting specific safeguards required by the Security Rule.

Peak 10 combines its ability to run HIPAA-compliant workloads in this secure cloud environment with managed security services to further assist customers with the technical complexities of the HIPAA regulations. These services include:

• Firewall
• Intrusion Detection and Prevention System (IDPS)
• SSL and IPSec VPN
• Multi-Factor Authentication
• Internal Vulnerability Scanning
• External Vulnerability Scanning
• Web Application Firewall (WAF)
• File Integrity Monitoring (FIM)
• Security Event Log Management (SELM) and Monitoring

Other services are also available. In addition, Peak 10 provides customers with online access to Peak 10's annual audit report of healthcare information privacy controls (AT 101) for data center operations.

Audit-ready

Peak 10 is audit-ready for customers who need assistance in meeting the requirements of regulatory demands of HIPAA/HITECH, as well as:

• SSAE 16
• Food and Drug Administration
• Payment Card Industry (PCI) Data Security Standard (DSS)
• European Commission's Directive on Data Protection ("Safe Harbor")
• Sarbanes-Oxley (SOX)
• ISO 27001
• Gramm-Leach-Bliley (GLBA)

To learn more about HIPAA, visit the U.S. Department of Health and Human Services (HHS) web site at: http://www.hhs.gov/ocr/privacy/index.html