Personally identifiable information is subject to additional compliance regulations and requirements (HIPAA and GLBA).
Are you covered?
SharePoint sites that are used to capture, process, or store personally identifiable information (PII) are subject to numerous compliance standards and regulations. Over 45 states have now enacted data breach laws governing PII security breach response. In addition, some forms of PII, notably healthcare data and customer financial data, are subject to additional compliance regulations and requirements (HIPAA and GLBA).
A basic issue that SharePoint administrators, architects, and IT security folks need to come to grips with is determining whether your SharePoint sites have PII stored in them.
To understand how best to deal with personally identifiable information in SharePoint, the compliance and security experts at CipherPoint have also created a series of free tools and whitepapers for the SharePoint community.
These include a free content scanner tool that will crawl SharePoint sites and the content stored in them, looking for pattern matches on common PII data patterns such as social security numbers and credit card numbers. The content scanner may be registered for and downloaded here, at the SharePoint Defense in Depth community site.
Register here for the Securing Sensitive Information in SharePoint whitepaper, which deals with securing PII in SharePoint farms.
A general whitepaper dealing with SharePoint compliance issues across numerous regulations can be registered for and downloaded here.
For the SharePoint HIPAA/HITECH Compliance whitepaper, click here to register and download.
This is a paid announcement by CipherPoint.