INRange Systems, Inc.

Company: INRange Systems, Inc.
Industry: Medical Equipment and Supplies
Carpathia Services: Secure Managed Hosting, Compliance

Why Carpathia?

• Carpathia’s ability to meet all of the federally mandated DIACAP and HIPAA regulatory requirements
• Carpathia’s industry leading high security and compliant datacenters, such as the Vault
• Carpathia’s ability to provide Certification and Accreditation (C&A) services quickly and easily

Background
Developed by INRange Systems, the Electronic Medication Management System (EMMA®) system is a medication delivery unit that allows Military personnel and veterans to safely and securely medicate in their home. By engineering a system that has the capability to automatically monitor a patient’s medication intake, automatically alert the patients when it’s time to take their medication, dispense the medication in the correct dosage, and notify the pharmacy when the prescription needs to be refilled, and document and report on adherence INRange Systems developed a unique solution to a difficult problem.

Challenge
Automating delivery and monitoring of medication to patients was just one of the challenges that INRange Systems was faced with. Ensuring the confidentiality and integrity of the patients’ Personally Identifiable Information (PII), as well as Personal Health Information (PHI) was another. Because the EMMA system was being utilized by the Department of Defense, and the system contained PII and PHI, INRange was required by law to ensure the EMMA system met DIACAP and HIPAA compliance requirements.

Approach
INRange needed to select a hosting company that could meet all of the federally mandated DIACAP and HIPAA regulatory requirements, in addition to providing compliance services. INRange chose Carpathia Hosting because of its industry leading high security and compliant datacenters, as well as Carpathia’s ability to provide Certification and Accreditation (C&A) services.

Solution

Through Carpathia, INRange is now able to deliver the EMMA system to patients within the Department of Defense system in a secure, compliant manner. To guarantee compliance and protect patients PII, Carpathia delivered a high availability and fully DIACAP and HIPAA compliant solution by implementing the fully managed hosting solution to include the following controls and services:

Controls:

• Hardened bunker style datacenter
• Perimeter fencing and lighting
• 24x7x365 roving armed security guards
• Card Key and Biometric access controls
• Intrusion detection: CCTV, alarmed door sensors
• N+2 compliance on all critical infrastructure: power and HVAC
• Access controlled Vaults that are EMP and Tempest proof
• Secure media handling
• 24x7x365 system monitoring
• DR/COOP
• Access to customer systems via cleared personnel with need to know access.
• STIG hardened systems
• Network Intrusion (NIDS)
• Host Intrusion (HIDS) via Tripwire
• Encrypted SSL VPN
• 2 Factor RSA Authentication
• Documented policy and procedures

Services:

• Daily backups of customer systems
• Certification and Accreditation Services
• Vulnerability Scanning
• Remediation Services