Comments on: The Role of IAM in HIPAA/HITECH Compliance http://www.discoveringidentity.com/2009/11/09/the-role-of-iam-in-hipaahitech-compliance/ Exploring the science and magic of Identity and Access Management Fri, 02 Dec 2011 18:45:07 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Mark Dixon http://www.discoveringidentity.com/2009/11/09/the-role-of-iam-in-hipaahitech-compliance/comment-page-1/#comment-558 Mark Dixon Tue, 10 Nov 2009 19:51:27 +0000 http://www.discoveringidentity.com/2009/11/09/the-role-of-iam-in-hipaahitech-compliance/#comment-558 <p>Thanks, Dave. Your suggestions are very appropriate. I may be able to get them into the final document.</p> <p>Mark</p> Thanks, Dave. Your suggestions are very appropriate. I may be able to get them into the final document.

Mark

]]> By: Dave Pickens http://www.discoveringidentity.com/2009/11/09/the-role-of-iam-in-hipaahitech-compliance/comment-page-1/#comment-557 Dave Pickens Tue, 10 Nov 2009 13:39:40 +0000 http://www.discoveringidentity.com/2009/11/09/the-role-of-iam-in-hipaahitech-compliance/#comment-557 <p>Great summary Mark!</p> <p>I would add reduced time to compliance when the law / regulations change as they periodically do.</p> <p>Also would add that audit / compliance costs are reduced because rather than manually gathering data for attestation purposes, process are documented and reports (both pre-defined and ad-hoc) are readily available.</p> <p>Perhaps even going so far as achieving various ISO certifications becomes easier as well (eg. ISO-27002)</p> Great summary Mark!

I would add reduced time to compliance when the law / regulations change as they periodically do.

Also would add that audit / compliance costs are reduced because rather than manually gathering data for attestation purposes, process are documented and reports (both pre-defined and ad-hoc) are readily available.

Perhaps even going so far as achieving various ISO certifications becomes easier as well (eg. ISO-27002)

]]>