Disk Encryption For HIPAA Compliance By Jetico

To address the need to use encryption for HIPAA compliance, data protection software developer Jetico, Inc. Oy has announced the BestCrypt Base.

Built on Jetico’s whole disk encryption, BestCrypt Base prevents data breaches from lost or stolen computers containing electronic protected health information (ePHI).

Healthcare customers can rely on an encryption software that won’t disturb natural workflow – start-up and shutdown can work the same as always with BestCrypt Base.

Ray Young, information technology officer, NYC REACH, department of health and mental hygiene, says: “Massive fines from non-compliance are now coming more and more often. But healthcare offices still resist using data protection software. Encryption is falsely perceived as complicated, expensive and slow – in other words, people imagine that it’s a real headache.”

He continues: “With BestCrypt Base, finally encryption is easy, simple and reliable. Plus it’s stealthy and affordable. Small and medium healthcare offices can struggle with integrating technical solutions, but now they are out of excuses to resist encryption for HIPAA compliance. Personally, I use Jetico software on all my computers and recommend it to anyone that needs to have peace of mind for sensitive data. I just love it! I prefer them to monolithic companies because Jetico is entirely focused on data protection – that’s all they do.”

Developed on needs learned from the U.S. healthcare market, BestCrypt Base has been designed to deliver a solution for any cover entities that must comply with HIPAA, but are concerned about frustrations related to using encryption software.

Jetico CEO Michael Waksman focuses on the user benefit claiming: “Jetico’s new BestCrypt solution addresses two major pains in the U.S. healthcare market. First, we eliminate the risk of severe financial penalties for non-compliance with HIPAA. Second, our solution overcomes perceived complications of using and managing encryption. By running transparently, BestCrypt Base allows your staff to continue working naturally without the need to learn additional computer skills.”

When using BestCrypt Base, encryption keys reside on a dedicated Key Server. By default, the keys are separated from the media where patient data is stored, as strongly recommended by the U.S. Department of Health and Human Services.

Waksman adds: “BestCrypt Base uniquely features Remote Key Storage. Jetico’s latest encryption innovation was driven by our desire to help customers easily follow guidance issued by HHS.”

BestCrypt Base offers following benefits and features:

• Remote Key Storage to physically separate encryption keys from patient data. As per guidance issued by Health and Human Services (HHS), “To avoid a breach of the confidential process or key, these decryption tools should be stored on a device or at a location separate from the data they are used to encrypt or decrypt.” (U.S. Department of Health & Human Services, Guidance to Render Unsecured Protected Health Information Unusable, Unreadable, or Indecipherable to Unauthorized Individuals ,14 Feb 2014].
• Adjustable security settings in a simple click. Computers can be office-based use only (desktops, servers) or permitted to be brought off network (moveable laptops)
• Easy installation and automatic encryption of client computers. Encryption can now be invisible to users with start-up and shutdown working the same as always
• Encryption of all disks residing within the local network. Built upon latest version of BestCrypt Volume Encryption, including support for Windows 8, UEFI and GPT
• Minimal administration in simple management console (access control, key backups)
• Inexpensive disk-less hardware for Key Server (under $50). Low system requirements needed on dedicated server for encryption key
• Advanced Encryption Standard (AES) in XTS encryption mode with 256-bit key. Gain peace of mind with HIPAA compliance to avoid costly penalties

Jetico provides military-standard data protection software for sensitive and mission-critical data throughout the lifecycle. Founded in 1995, it is privately held and headquartered in the Otaniemi Science Park in Helsinki, Finland.