Resources for Health Insurance Portability and Accountability Act (HIPAA)

Complex password compliance requirements made simple

searchsecurity.techtarget.com.au

At the heart of compliance is access management and authentication. And at the heart of authentication are user IDs and passwords. Despite their many weaknesses and the availability of multifactor authentication technologies, the venerable user ID and password combo remains the centrepiece of access to many corporate systems.

Rather than tearing up network plumbing for new-fangled devices, like one-time password (OTP) tokens and smart cards, many companies have opted to strengthen their existing password systems to keep compliant with audit and compliance regulations and standards, including Sarbanes-Oxley, HIPAA, FFIEC and PCI DSS.

In this tip, we'll take a look at the password requirements for each of these regulations and standards and offer some best practices and tools to enforce password compliance.

View the Resource

Share or bookmarklet this web page at: