Healthcare Security Compliance Automation Deployment Guide
This guide describes how to implement the LogRhythm Healthcare Security Compliance Automation Suite. This suite provides pre-bundled Investigations, Alarms, and Reports that are designed for the HIPAA, HITECH, and PI frameworks in a way that blends the support of these three healthcare compliances into a single module. In addition, this guide shows how to meet HIPAA, HITECH, and PI compliance regulations using the LogRhythm Investigations, Tails, Alarms, and Reports. The suite is designed to be dynamic as your organization’s compliance and security posture mature and adapt.
After you configure the automation suite, the LogRhythm Platform Manager will include the proper components needed to augment healthcare compliance efforts. Alarms, Investigations, and Reports are automatically associated with the correct HIPAA/HITECH/PI environment classifications and user lists. You can then schedule Reports for periodic generation and delivery, or generate them on demand.
Established reporting packages allow you to organize pertinent log data associated with a specific audience. To identify areas of non-compliance in real-time, you can leverage Investigations and Alarms for immediate analysis of activities that impact your organization's Personal Health Information (PHI) systems and Electronic Health Records (EHR).
Intended Audience
This guide is intended for LogRhythm SIEM administrators and analysts who are responsible for maintaining compliance with HIPAA, HITECH, and PI. Further, weekly, daily, and monthly Reporting Packages can be established to provide forensic evidence and audit data to appropriate audiences for distribution. These groups include Security Operations, Security Management, IT Operations, Audit, and Executive.
Module Contents
This module adds to an existing LogRhythm deployment, as follows:
- 53 AI Engine Rules
- 55 Investigations
- 29 Lists
- 66 Summary Reports and 32 Detail Reports
- 6 Reporting Packages
Prerequisites
The Healthcare Security Compliance Automation Suite is designed to work with the LogRhythm AI Engine and LogRhythm’s Threat Intelligence Service.
Overview of Steps
This guide is divided into the following sections: