I worked for about a decade in healthcare. Uptime requirements were never a HIPAA concern for us. Clinical concern, sure - but there was never a baseline we had to achieve. 

But, it is a constantly evolving thing. 

Wed Aug 11 2021 19:19:20 EDT from ParanoidDelusions

I worked for about a decade in healthcare. Uptime requirements were never a HIPAA concern for us. Clinical concern, sure - but there was never a baseline we had to achieve. 

But, it is a constantly evolving thing. 

 

I may be blaming the uptime requirements on a  HIPAA rule that may not be a de facto rule or buried within other rulea, but it could be one or more of the following:

Something listed somewhere as "best practices" the Client site insisted on and,

OR something the clients' insurer demanded. I don't remember the exact details, but I can get them from the office tomorrow. What I do remember is that it was painless for us to be in compliance with the server hosted virtually, whereas if we continued to do it in our offices it required cases of red tape and headaches. The client spends enough on us every year so we would definitely keep them happy but the 3rd party hosting route was a home run.

We have Client sites with some crazy demands. One specialist office has all their "legacy" patient records on a very old Vax VMS system that has been kludged to run in 2021 in a virtual appliance and DOSbox as the terminal client... all because the office refused to pay the original software vendor for migration to modern day stuff. On this one we have hold harmless agreements and releases and indemnifications in place for us because... it works today, but it really shouldn't.

We also have another client site still on Novell Netware 4.12 out of pure stubbornness. To change that to something new would require the client site to re-tool their entire production line and they won't spend the 780k that it would cost. They'd rather pay us 75k a year to keep their Model-T server instance handling little tranasction records.

I agree with the client requirements, we all get those from time to time. I juts not heard it from a regulation.

I dont think even FedRamp has that sort of requirement. ( it has others of course... )

I thought that you could make a Linux box emulate Netware enough for their clients to connect.  Wont help the client side, but at least get the server on something current. 

I could be wrong...

Thu Aug 12 2021 12:24:05 AM EDT from smashbot64

We also have another client site still on Novell Netware 4.12 out of pure stubbornness. To change that to something new would require the client site to re-tool their entire production line and they won't spend the 780k that it would cost. They'd rather pay us 75k a year to keep their Model-T server instance handling little tranasction records.

 

Yes, the Netware server is a .vmx now, and client-side interaction is in my opinion, a train wreck.

Doesn't matter if it is a "fraud" or not. If you're doing IT healthcare - it has very real ramifications beyond those in nearly any other industry you can work IT in. 

Negligence won't generally get you *prison* time in corporate IT. It can in healthcare IT. 

Mon Aug 16 2021 12:07:04 EDT from interrupt

HIPPA is a fraud. In reality it's corrupted by government agencies (all the 3 digit ones) and what really sucks is that when a doctor calls for an order it goes to some schmuck in india probably eating a big mac. Kinda makes me think of that commercial of the russian who answers support with I'm Peggy. Hippa is as valid as trump being cheated :D. haha.

I did some CMR 17.01 bullshit for a while too. Compliance all sucks. :) 

Tue Aug 24 2021 12:06:05 EDT from LoanShark

I'm working on SOC2 compliance. What a bag of dicks...

At least it's not as bad as HIPPA (although you can use some of the same tools to streamline compliance with both)

Tue Aug 24 2021 12:06:05 EDT from LoanShark

I'm working on SOC2 compliance. What a bag of dicks...

At least it's not as bad as HIPPA (although you can use some of the same tools to streamline compliance with both)

When our company took on our first client that fell under HIPAA rules, the premium for general liability insurance almost doubled. Welcome to New Jersey. Who will you sue today?

And then you begin to understand what it is really about, and who lobbies for it. 

This is why every business or product in California has a cancer warning on it. Not because they care - in fact, the signs are so present it makes it clear that everything you do exposes you to cancer causing agents. It sends the opposite message intended. Instead of warning you about serious threats of cancer, it reduces all potential exposure to any negligible amount of cancer causing agent to the same level of warning - reinforcing the idea that smoking unfiltered cigarettes is the same as breathing air in an elevator. 

So protecting us and informing us against threats isn't the goal. What is it then? 

Probably selling a lot of signs and labels that say, "this can cause cancer," to California businesses by *mandate* that they buy and post them. 

I wonder who Nancy Pelosi is related to who is in the signage industry. 

Thu Aug 26 2021 23:31:16 EDT from smashbot64

 

Tue Aug 24 2021 12:06:05 EDT from LoanShark

I'm working on SOC2 compliance. What a bag of dicks...

At least it's not as bad as HIPPA (although you can use some of the same tools to streamline compliance with both)

When our company took on our first client that fell under HIPAA rules, the premium for general liability insurance almost doubled. Welcome to New Jersey. Who will you sue today?

My wife is gone, my kid is gone, I'm sitting at home, mainstream social media is pissing me off and making me hate my fellow man, I'm not super enjoying AD&D Pool of Radiance, I'd like to get drunk, but my pool is invaded by wasps, and there isn't enough Citadel activity to keep me occupied. 

I can't seem to find a project engaging enough to keep me involved. I'm tempted to go take nap #2 - but I hear that napping when you're just bored is a sign of depression - and I'm not depressed. 




Just apathetic. 

Oh for the days of trying to transfer Citadel from a Pi to Intel architecture - when I felt alive... 

do what i do when im bored and stuck inside: i look on YT for new ( to me ) music. 

Nothing helps. I played Pool of Radiance tonight. I just had such a busy two weeks, being at home all alone for the weekend is dull... but I don't want to go out. 

Sat Aug 28 2021 18:01:23 EDT from Nurb432

do what i do when im bored and stuck inside: i look on YT for new ( to me ) music. 

Try opensim.. Learn a few new tricks and build something out on OGrid, or your own ( virtually )

I used to do that, but sometimes its just nice to turn the brain off, as much as possible anyway.

Sun Aug 29 2021 02:11:38 PM EDT from darknetuser

I just try to learn something new. Specially if Ithink I can put it to good use.