SOC 2 + HIPAA

SOC 2

SOC 2 deals with the controls put in place to manage customer data based on AICPA's five principles - security, availability, processing integrity, confidentiality, and privacy. ManageEngine and its products are SOC 2 Type II compliant.

Health Insurance Portability and Accountability Act (HIPAA)

HIPAA is a US federal law passed in 1996. It aims to protect the privacy and security of individuals' personal health information (PHI) by setting national standards for the collection, use, and disclosure of PHI.

HIPAA includes several rules that healthcare organizations must follow, including the Privacy Rule, Security Rule, Breach Notification Rule, and Enforcement Rule. Failure to comply with HIPAA can result in significant fines and legal penalties.

With the help of ADManager Plus, monitor your AD environment and obtain comprehensive reports on AD objects, user logon activity, etc. and become HIPAA compliant.

ADManager Plus offers reports to obtain the following information:

SECTION	DESCRIPTION	REPORTS
164.308. (a)(1)(ii) (a)	Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information held by the covered entity or business associate.	Generate reports on: Recent logon failures Users created in the last N days Recently logged on users Real last logon Recently modified users and GPOs
164.308. (a)(1)(ii) (d)	Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports.	Reports on: Users who logged on in the past N days Users actual last logon date and time Users with terminal server access

Click here to learn how to use ADManager Plus in HIPAA compliant manner.

Steps to generate HIPAA compliance reports in ADManager Plus,

1. Logon to ADManager Plus and navigate to the Reports tab.
2. In the left pane, click Compliance Reports.
3. Under HIPAA, click the report that you wish to generate.
4. Select the desired domain(s) and hit Generate.

Click here to know more about the various reports available in ADManager Plus.