Complaint Hosting: Meeting the Requirements of FISMA, DIACAP, HIPAA, SOX and PCI

March 28th, 2012 by Rich Thompson

Tags:

IT organizations are under increasing pressure to deploy compliant hosting solutions that ensure physical security, data protection, identity management, application security, privacy and reliability. To address these requirements, a variety of regulatory frameworks have been enacted, largely with the goal of increasing security for federal agencies and across a variety of commercial industries:

In 2002, the U.S. Congress passed the Federal Information Security Management Act (FISMA) due to the increased risk of cyber-attacks against vital government information systems.
Similarly, the U.S. Department of Defense has implemented the DoD Information Assurance Certification and Accreditation Process (DIACAP) to ensure the integrity of critical defense-related IT infrastructure.
The Sarbanes-Oxley Act of 2002 (SOX) was enacted in response to various corporate accounting scandals.
The Payment Card Industry Data Security Standard (PCI DSS) was developed by the credit card industry to ensure that all merchants accepting credit and debit cards meet a minimum level of security when storing, processing and transmitting cardholder related data.
The Healthcare Insurance Portability and Accountability Act (HIPAA) requires covered entities and business associates to ensure safeguards are placed on patient data to protect integrity, confidentiality and availability of electronic protected health information (PHI).

Each of these compliance frameworks, as well as other industry and agency-specific compliance standards, has been enacted with the broader goal of ensuring the overall security, integrity and availability of critical IT systems and data.

Data Center Expansion: Build v. Buy

These standards and a variety of others add additional compliance burden to organizations that participate in these industries. Simultaneously, broader IT trends, including the massive growth of data, migration toward high-density compute platforms, virtualization and data center consolidation are placing additional pressures on legacy enterprise data center facilities. In an environment of tightening IT budgets, building additional data center infrastructure or retrofitting existing facilities can be costly.

IT organizations are increasingly faced with a decision of whether to commit large amounts of capital towards building additional data center capacity or leasing data center space from a commercial data center provider. Faced with this choice, IT organizations are increasingly choosing to lease space from commercial providers. As a result, data center operators must be prepared to provide their customers with colocation and compliant hosting solutions that meet the requirements of a variety of regulatory frameworks in order to provide assurances to customers that their critical IT systems and data will remain secure.

The IBX Vault

That was the thinking behind the new IBX Vault, which (through our partnership with Equinix) is currently under construction next to our current Vault Data Center in Dulles, Va.

This 64,000 square foot data center is aimed at supporting industry-specific compliant hosting solutions for healthcare companies, federal agencies and commercial industries – including FISMA, DIACAP, HIPPA, SOX, and PCI. The IBX Vault will be the most secure compliant data center in the industry, providing the maximum security available to both federal and commercial customers.

Want to learn more? Join us for a free networking event on Thursday, April 12 from 6-8pm at the Tower Club in Tysons Corner, Va., where representatives from both Carpathia and Equinix will be on-hand to answer any questions you may have about the data center. We’ll also have an architectural model of the facility on hand - RSVP today!

Write a comment

Required fields are marked with *.

Showing comments 1 to 4 of 18 | Next | Last

vszgdi
Posts: 18

dBYSvJcibTGqh
Reply #18 on : Wed December 19, 2012, 20:46:18

VHYgfl , [url=http://eodiiokzhgtv.com/]eodiiokzhgtv[/url], [link=http://buhdfhqpntmg.com/]buhdfhqpntmg[/link], http://zrstgdgllrdc.com/

xatahebz
Posts: 18

OBWCnuIqgYfEbxoeNZp
Reply #17 on : Fri December 14, 2012, 22:33:12

KpEqTq <a href="http://wkptikruuolc.com/">wkptikruuolc</a>

yqrjaflppoj
Posts: 18

vLyLjvlZTOQigTMUM
Reply #16 on : Wed December 12, 2012, 23:41:46

vfg1KY <a href="http://onudczgquvum.com/">onudczgquvum</a>

Anderson
Posts: 18

mbIndJNpfQkMUkSHMZ
Reply #15 on : Wed December 12, 2012, 03:06:20

It's been interesting to watch this gain traoticn. It makes sense, too, linked data being (basically) the same thing as the web but w/ typed links and more semantically meaningful data.The code4lib 2009 conference had a day-long about the topic, in fact, and it was rather well-attended. We had 50 or so library technologists and techie librarians show up.Re: LC and linked data: LC hosts a series of presentations as part of a program called Digital Futures & You, and the latest was by Dr. Barbara Tillett. The topic was the FRBR model but linked data figured heavily into it, which is promising.I'll be interested to read along as you explore this topic.

Showing comments 1 to 4 of 18 | Next | Last