Meeting requirements

Most industries today require organizations to ensure compliance with different policies and regulations.

The StoneGate secure connectivity solution provides the tools your organization needs to meet standards like HIPAA, PCI, Sarbanes-Oxley, Gramm-Leach-Bliley and Basel II.

Below you will find more information on HIPAA and PCI regulations and how StoneGate helps you to achieve compliance.

HIPAA

HIPAA is an initiative to develop standards and requirements for the secure transfer of any health information that could identify individual patients. Health care organizations have to be compliant with three aspects of the Act:

Electronic transaction sets
Privacy
Security

A properly configured StoneGate security solution enables an organization or institution to achieve compliance with the relevant sections of the act.

The HIPAA Security Rule has six sections; out of these, the Administrative Safeguards and Technical Safeguards deal with requirements addressable by a network security solution.

Read more (PDF)

Payment Card Industry (PCI) security standard

The PCI DSS is a security standard that includes requirements for all parties that store, process or transmit card holder data. It affects all payment channels, including retail, mail/telephone order and e-commerce. It defines requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.

Every Internet merchant, payment service provider or other organization participating in the transaction process and/or storing confidential credit card information is required to meet PCI compliance. Penalties for non-compliance include big fines and withdrawal of payment card services.

To comply with PCI standards, firms must scan networks four times a year and carry out an annual audit to ensure that the way they work is as safe as the standards demand. Without proper security solutions with comprehensive management, this can create a true predicament.
Read more (PDF)

“ We also recently purchased Stonesoft’s IPS product to integrate with our existing requirements. This solution has helped us maintain our independently assessed information security accreditations from both Visa and MasterCard."
- Conor McGoveran, Realex’s security and infrastructure manager

Regulatory compliance in IT networks can be assured by implementing StoneGate SSL VPN, StoneGate IPS and StoneGate unified management solutions.