|
|
Customer and Partner Endorsements
FairWarning® customers represent over 800 hospitals and 2,500 clinics in the United States, Canada, France and the United Kingdom.
Testimonials
"It is highly unlikely that an organization can fully comply with its obligations under HIPAA and the ARRA HITECH without implementing automated systems for patient and user privacy auditing, managing and aggregating accounting of disclosures and identity management.” John Houston, University of Pittsburgh Medical Center (UPMC) Vice President Privacy and Security Officer
"Between Federal and State fines, our financial exposure if a breach occurred was significant. With FairWarning®, we have achieved a cultural change that is helping us manage that risk." Chuck Burbank, Manager, Information Security Kelsey-Seybold Clinic
“Deployment of FairWarning will allow us to produce a consolidated audit trail across a number of clinical applications with minimum resource, quickly answering the question – who has viewed a specific electronic patient record. We will also be able to set up alerts of attempted access to VIP patients’ records. The system allows us to link staff user IDs through a wide range of applications and specifically through Empower to warn against workgroup members browsing colleague’s records.” Ted Boyle, Systems Administration and Security Manager at NHS Lothian explains why he chose FairWarning® Privacy Breach Detection
“Weill Cornell Medical College has deployed security information management tools to address important elements of privacy and security for our patient’s data. By adding FairWarning® to our environment, we are addressing essential privacy auditing needs and adding a degree of sophistication that advances our culture of privacy and compliance.”
Ben Nathan, Director of Operations and Infrastructure, Information Technologies and Services Department (ITS), Weill Cornell Medical Center
“In the old days, it was like coming into the house and finding a burglar. With FairWarning®, it’s more like the alarm system that warns me someone is trying to get into the house.”
Ben Nathan, Director of Operations and Infrastructure, Information Technologies and Services Department (ITS), Weill Cornell Medical Center
"The integration of FairWarning® with the Emergency Care Summary (ECS) in Scotland will be a major step forward for boards in meeting the strict audit protocol requirements for ECS. FairWarning® will make it significantly faster and easier for all accesses to be monitored and reported on and this will have significant benefits for ensuring the secure use of patient information in the NHS in Scotland."
Jonathan Cameron, ECS Programme Manager, National Services Scotland
“Before, we had to contact four, five or six people to provide the data. Now, we can just provide a FairWarning® report that covers it all.” Chris Schmidt, Network Security Systems Engineer, Health First, Inc.
“Upon implementation, the solution provided actionable information that has allowed for quicker resolution and enforcement of privacy policies, which has created a more secure and compliant environment around our protected health information. The auditing process implemented around the FairWarning application has greatly heightened our employees' awareness of appropriate access to protected health information.” Barbara Beckett, Chief Privacy Officer, and
Dave Wiseman, Information Security Manager, Saint Luke's Health System
"FairWarning®'s presence in our environment ensures we've met qualifications required by HIPAA as well as the new ARRA-HITECH."
Dena Boggan, CPC, CMC, CCP and St. Dominic-Jackson Memorial Hospital HIPAA Privacy / Security Officer
"Endpoint encryption and privacy breach detection are among the most relevant technologies for ARRA HITECH compliance. Healthcare industry leaders are implementing these to protect their patients and address compliance requirements."
Barry Runyon, Research Vice President Healthcare Providers, Gartner, Inc.
“Our biggest bang for the buck for regulatory compliance is the FairWarning® solution. FairWarning® enables us to conduct proactive, continuous privacy auditing of our core clinical applications, and alerts us on pre-defined events…This saves me tremendous amounts of time.”
Christopher Paidhrin, IT Security/HIPAA Compliance Officer for Southwest Washington Medical Center
“Swedish Health Services is committed to protecting the privacy of its patients and we look forward to augmenting the existing auditing processes already in place. By adding FairWarning® to our environment, we are adding a degree of automation and sophistication that enables us to consistently analyze massive volumes of data and rapidly pin-point potential privacy issues”,
Carolyn Barton, Director of Corporate Compliance, Internal Audit & Privacy for Swedish Health Services
“We chose FairWarning® because CRH wanted to find an audit tool that could provide us with an enterprise view of our user's activity. We wanted a tool that would work with any application and not be limited to a specific vendor. They have been great to work with, open to new challenges and very responsive.”
Audrey Tyree, Columbus Regional Hospital
“The introduction of FairWarning® as an addition to our existing capabilities has allowed us to significantly move ahead as we strive to ensure compliance with the DPA and provide assurance to our patients that their data is in safe hands.”
Martin Egan, Director of eHealth, NHS Lothian
“UCSD Medical Center has deployed various tools to ensure the privacy and security of our patient’s data. By adding FairWarning® to our environment, we are adding a degree of sophistication to our review of massive amounts of information to help us ensure the privacy of our patients’ protected health information”.
Ed Babakanian, Chief Information Officer, UCSD Medical Center
“FairWarning® is so much more proactive than our old method,” says Frank Maurer, “It tells us if there are policy violations, so we can quickly respond. In the world of fines and penalties, any breach we can prevent is a beautiful thing.”
Frank Maurer, Privacy Officer, Weill Cornell Medical College
"Selecting FairWarning became a no-brainer when the product demonstrated its ability to seamlessly integrate audit data from McKesson applications as well as non-McKesson audit sources". "By deploying FairWarning, Hackley Hospital will eliminate the manual challenges associated with conducting HIPAA privacy audits of electronic health records. FairWarning's compliance dashboard and incident investigation capabilities will dovetail into our security awareness training program. These capabilities are important keys to re-enforcing Hackley Hospital's culture of patient privacy and information security,"
Steven Rop, Director Clinical Informatics and HIPAA Security Officer, Mercy Health Partners, Hackley Campus
“Privacy breach detection has always been taken seriously at Halifax and FairWarning® will automate our existing manual processes. Additionally, we will be able to systematically perform comprehensive auditing since FairWarning® delivers best practices.”
Bill Zirkle, Manager of Information Systems at Halifax Regional Health System
“Cookeville Regional Medical Center (CRMC) is fully committed to growing our culture of compliance, privacy and security which we believe is increasingly important to our electronic health record environment. By non-invasively centralizing and proactively monitoring clinical audit data, FairWarning enables existing CRMC staff to grow and strengthen our privacy culture. FairWarning also provides CRMC with the ability to create ad hoc reports that can eliminate labor intensive processes as well as carry out rapid investigations.”
Tim McDermott, Manager Application Support Cookeville Regional Medical Center
"As the recent patient record breaches in both public and private hospitals show us, authorization and access to healthcare applications and data is issue #1 to solve before we can get to national e-health... Sun and FairWarning® make a big contribution by providing rapid monitoring and alerts when unauthorized access occurs...," Casey Palowitch, Senior Director, Business Development and Systems Engineering, Global Government, Education, Healthcare
"It is critical to ARRA HITECH compliance and patient privacy that care providers monitor for privacy breaches in Electronic Health Records. Failure to do so leads to embarrassing media attention, loss of patient trust, government compliance review, and even fines. FairWarning® not only provides immediate awareness of privacy breaches, but also captures best practices from leading care providers, so that each new customer benefits from the FairWarning® customer community experiences."
Mac McMillan, Chair, HIMSS Privacy & Security Steering Committee, & CEO, CynergisTek
"Establishing a solid foundation of privacy and security auditing in electronic health records is essential to the healthcare industry's viability. I am delighted to see solutions like FairWarning contribute to a strategic industry direction that I am committed to." John Wade, 2008 Chairman of HIMSS
“With increased clinical and business automation within the care delivery organization (CDO), along with increased constituent access to protected healthcare information (PHI), CDOs must take steps now to detect and prevent unauthorized access, identity and medical identity theft. Application audit log monitoring, reporting and alerting is a practical and non-invasive approach to compliance,” Barry Runyon, Research Vice President Healthcare Providers, Gartner, Inc.
“This [privacy breach detection] is the low hanging fruit of HIPAA security rule safeguards. Without the proper technical controls like system auditing, personal healthcare information (PHI) can be put at risk”. Barry Runyon, Research Vice President Healthcare Providers, Gartner, Inc.
“MEDITECH hospitals are asking for tools that can help them with Privacy Auditing of user activities in MEDITECH as well as other applications they have in their facility and we are excited about working with FairWarning to integrate their solution with the MEDITECH HCIS so that we can offer a solution that will meet the needs of hospitals using MEDITECH.”
Christopher Roggenstein, President and CEO, Forward Advantage
"FairWarning's focus on healthcare markets complements ZixCorp's strengths. We're committed to partnering with high-quality companies that can take advantage of our interoperability, fast deployment, and usability to offer their customers the most comprehensive security services on the market."
Rick Spurr, Chief Executive Officer for ZixCorp
Privacy Breach & Best Practice Findings Report and Other Publications "Security and privacy breaches threaten to undermine the public's trust in health IT and electronic health information exchange - just at the time when policymakers are actively promoting it. This report [ Breach Findings] demonstrates that implementation of industry best practices reduces the risk of breach and is key to enabling more widespread adoption and use of e-health technologies." Deven McGraw, Director of the Health Privacy Project, Center for Democracy and Technology "Historically healthcare providers have relied on intensive and manual procedures to monitor for breaches. As a result, many of these entities are unaware of the actual number of breaches within their organizations and therefore unable to report or thwart these breaches. What should be eye-opening for these organizations that do not have a reliable automated monitoring process, is the vast financial and reputational risk posed by any one of these breaches."
Cliff Baker, VP & Chief Strategy Officer, HITRUST Alliance LLC "For the first time in this industry, there is data that quantifies the risk of not proactively and systematically monitoring for breaches. More importantly, this newly released report [Breach Findings] proves that policy without enforcement doesn't work and creates entity-wide risk through empirical data. For EHRs to be successful and to secure public trust, the industry as a whole must commit to establishing ongoing breach monitoring, an environment of informed compliance and effective risk mitigation."
Mac McMillan, Chair, HIMSS Privacy & Security Steering Committee, & CEO, CynergisTek |
