Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information held by the covered entity.

Endpoint Central MSP's patch management feature helps in deploying patches across every major operating system (Windows, Mac & Linux) and helps in patching third party applications. The periodic scans initiated in the network gives details of the IT assets in the network and identifies vulnerable systems and applications.

Endpoint Central MSP also provides exhaustive reports on system vulnerabilities, patches, OS, firewall, filevault, bitlocker, antivirus, etc. which elaborates the threats present in the network devices..

Implement security measures sufficient to reduce risks and vulnerabilities to a reasonable and appropriate level to comply with §164.306(a).

Endpoint Central MSP's Automate Patch Deployment (APD) feature provides administrators the ability to deploy patches missing in their network computers automatically, without any manual intervention. Periodic patching of vulnerable devices ensures the security of the ePHI available in the network devices.

Endpoint Central MSP's Secure USB feature allows network administrators to limit the scope of USB device usage by restricting selectively, blocking or allowing full use, thereby prohibiting any data leak. Geo-tracking, data wipe, putting the device in Kiosk Mode and remote lock of mobile devices enhances device security.

Endpoint Central MSP helps to deploy customised firewall settings and prohibit software to implement additional security measure. The Browser Security Plus add-on helps in preventing browser based threats and protect enterprise data from credential thefts, phishing attacks and accidental data leakage.

Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports.

Endpoint Central MSP provides various reports based on User log on/log off, USB device, alerts based on Software added/removed, periodic anitivirus updates, firewall, bitlocker and filevault status.

Implement procedures for the authorization and/or supervision of workforce members who work with electronic protected health information or in locations where it might be accessed.

With the help of Endpoint Central MSP, an IT admin can authorize permission to access file/folder/registry to users and groups who work with ePHI.

Using User logon reports, log on information can be periodically reviewed and inapproriate/failed log on can be detected.

Implement procedures to determine that the access of a workforce member to electronic protected health information is appropriate.

Using Endpoint Central MSP, an IT admin can manage permissions granted to access file/folder/registry to users and groups who work with ePHI. With user logon reports, logon information can be periodically reviewed and failed logon can be detected.

Implement policies and procedures for granting access to electronic protected health information, for example, through access to a workstation, transaction, program, process, or other mechanism.

An IT admin can manage access provided to the users using Endpoint Central MSP. Using Group Management, the administrator can add, remove or modify user policies and user groups thereby securing access to ePHI.

Also, permission to add/remove drives, can be provided to specific resources in the network.

Periodic security updates

Endpoint Central MSP provides Automate Patch Deployment (APD) feature, Antivirus definition updates and driver updates to secure the network.

Procedures for guarding against, detecting, and reporting malicious software.

Endpoint Central MSP's ability to prohibit software and block executable files helps in guarding against malicious software. 

The firewall configuration in Endpoint Central MSP additionally helps in protecting all network devices.

Procedures for creating, changing, and safeguarding passwords.

With the help of Endpoint Central MSP, an IT admin has the provision to change user's password.

Using Endpoint Central MSP, the administrator can take folder/file backup of important data which can be used to restore lost data under emergency conditions.

Implement electronic procedures that terminate an electronic session after a predetermined time of inactivity.

Endpoint Central MSP provides remote lock, signoff and shutdown features to terminate a session.

Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.

Endpoint Central MSP provides centralised inventory of hardware/software details of mobiles, desktops and laptops.

With User Logon reports, one can record the log on activities in Information Systems.

Implement procedures to verify that a person or entity seeking access to electronic protected health information is the one claimed.

Using Endpoint Central MSP, permissions to access restricted files/folders can be allowed for specific users.