Jacket 85, finding and sealing records

Where health information ends up in practice

Nobody plans for records to spread out. It happens because somebody was solving a real problem against a clock. An eligibility report dragged onto a laptop ahead of some meeting. A statement run abandoned in a shared box for a whole year. An appeal packet built on a desktop and never cleared away. A folder of scanned referrals the copier has filled steadily since the office changed buildings.

Discovery converts that from a matter of opinion into a list with counts beside it. That list is often the single most useful thing an office receives in its first quarter with us, because it is what a risk analysis can finally quote rather than estimate.

Sealing the copies that will travel anyway

Some copies have to move. A record goes to a specialist. An appeal goes to a payer. A file goes home with somebody who genuinely needs it there. Encryption fastened to the document instead of to the disk means that copy stays sealed when it lands somewhere outside your control.

Rules cover the everyday exits: removable media, browsers, chat clients, mail. Several profiles exist for good reason, since holding a billing desk and a waiting room machine to identical rules annoys everybody and protects nobody.

Lines filed here

What each line is, and what it costs.

Prices land on this page straight from billing the moment it opens. Shelve what you like while you read. None of it leaves your hands before the card is signed.

Fortify-DLP-ClassifyFiled spec

Sensitive Data Discovery

Actifile, sweeping for whatever is really there

Sweep the machines and whatever shares they can open, locate the regulated material, and hang a number on the exposure. Most offices get surprised twice over: once by where the files turned out to be, and once by how many there were.

Health and payment detail found across Windows hardware, macOS hardware and Linux hardware, plus whatever shares any of it can open.
A risk baseline split device by device, so remediation arrives with its running order attached.
Vulnerability scanning and trend reporting run beside the discovery.

Filed under	Actifile, jacket 85
Covers	One device for each unit, taking in the network shares that device can open
Retained	Findings and the risk baseline, kept through the term of the subscription
Released by	Our desk runs the sweeps; what becomes of a finding is settled with you
Checked against	A dated inventory of where regulated material turned up, and how much of it there was

Reading the rateper device
one month at a time, paid aheadQTY

Fortify-DLP-EnforceFiled spec

Encryption and Channel Control

Actifile, ruling on where a file may go

Now settle what becomes of whatever that sweep uncovered. Encryption fastens onto a document itself, keeping a copy sealed wherever it comes to rest, and rules go onto the everyday exits out of an office.

Encryption fastened to the document, so it does not stop at the edge of a disk.
Rules covering removable media, browsers, chat clients and mail.
Several profiles, because a billing desk and a waiting room machine held to identical rules suits neither.

Filed under	Actifile, jacket 85
Covers	One device for each unit, covering files that device makes, opens or copies
Retained	Keys and channel decisions, kept through the term of the subscription
Released by	Our desk applies the profile; the profile itself is signed off by you
Checked against	A record of documents sealed and of attempts turned away at each exit

Reading the rateper device
one month at a time, paid aheadQTY

Honest scope

Discovery locates files. Valuing them stays your work.

These two lines make a problem visible and then make copies harder to misuse. Neither of them makes a judgment that sits on your desk rather than on ours.

A ranked list is a starting point and not a decision. Somebody at your office still has to read the top of it and settle what happens next. We will sit in that meeting. We will not hold the pen during it.
Encryption obstructs nobody who is authorised. A colleague cleared to open a record still reads it, photographs it, and describes it down a telephone. That is an access review, and it is yours to run.
It cannot reach inside locked clinical equipment. An imaging unit forbidding third party software will not accept this agent, so whatever sits stored on it falls outside this inventory and wants handling another way.
This is not a retention program. How long something must be kept, and when it has to be destroyed, is a decision this software will carry out cheerfully and will never take on your behalf.

Filed note

Heads up: card statements show FORTIFY 24X7 - MediTrust Cyber is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Elsewhere on the rack