http://www.compliancehome.com/ ComplianceHome is one of the Web's largest library of resources for compliance management of HIPAA, SOX, FISMA, PCI, GLBA, FDA, Basel II, OSHA and ISO 27002/17799. Visit our directories which are the best source on White papers, related news articles, resources on the web, training, webinars, conferences, rules & regulation overview, ask the expert, job and search on vendors, solutions & products. http://www.compliancehome.com/images/rsslogo.gif http://www.compliancehome.com/ en-us Tue, 30 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15826.html Modulos Vice President of Business Development, Alan Mattson, will be leading a boardroom called IT GRC rapid deployment, due to the current need of faster deployment of GRC projects, as well as quicker results, and thus earlier return-on-investment. It will show how the IT GRC products have grown into the broader GRC space through adoption of Policy Management and ERM methods. http://www.compliancehome.com/news/HIPAA/15826.html Tue, 30 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15821.html The global leader in operational endpoint security, Lumension, has joined hands with Network Frontiers, a leader in IT compliance, to deliver the world's most comprehensive global compliance database for Lumension's customers. Network Frontiers' Unified Compliance Framework helps enterprises simplify and centralize compliance efforts by providing a single framework to establish a common set of methods, procedures, and controls across industry mandates, standards, requirements, and guidelines. http://www.compliancehome.com/news/PCI/15821.html Tue, 30 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/SOX/15820.html Websense, Inc. announced that Gartner, Inc. has positioned Websense as a leader in its recently released Magic Quadrant for Content-Aware Data Loss Prevention. The firm evaluated Websense Data Security solutions, which are part of the Websense Essential Information Protection(TM) portfolio of content-based security products. Vendors in the Magic Quadrant are selected based on their ability to execute and completeness of vision.The report concludes, The leaders have demonstrated good understanding of client needs and offer comprehensive capabilities in all three functional areas -- network, discovery, and endpoint -- either directly or through well-established partnerships and tight integration. They offer aggressive road maps, and they will need to execute on those road maps, fully incorporate enhanced features currently in development and address evolving market needs to remain in the Leaders quadrant. http://www.compliancehome.com/news/SOX/15820.html Tue, 30 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/SOX/15819.html Supremus Group LLC announces the successful launch of its redesigned website http://www.business-continuity-plan.com, an innovative portal offering exclusive Business Continuity Planning and Disaster Recovery Plan for organizations Looking to jump start Business Continuity Planning (BCP) and Disaster Recovery Plans (DRP). These templates will help hospitals, health plans and others to create their disaster recovery plans with great ease. Also these resources can be of enormous aid to the organizations looking ahead to comply with various regulatory authorities like HIPAA, SOX, FISMA etc. http://www.compliancehome.com/news/SOX/15819.html Tue, 30 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15818.html iMedicor, a Vemics Company, announced that it has entered into an agreement with Vitals, the leader in extensive, searchable physician databases. This partnership gives iMedicor the ability to access Vitals database of more than 700,000 practicing physicians in the United States to streamline physicians registration on the iMedicor portal. http://www.compliancehome.com/news/HIPAA/15818.html Tue, 30 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15817.html An open source business process management (BPM) software, Colosa's, ProcessMaker, that facilitates enterprises and public organizations to automate paper-based workflow processes, has been selected by Daytop-NJ to automate its core workflow processes and ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA).Daytop-NJ will rely on ProcessMaker, and support from its open source developer Colosa, to automate its processes, gain access to client data and update underlying workflows. As a leader in the field of substance abuse, Daytop-NJ has a commitment to reach the highest standards in safeguarding the security and privacy of its clients' data, and comply with the Health Insurance Portability and Accountability Act (HIPAA). It has selected ProcessMaker to help deliver on these needs. http://www.compliancehome.com/news/HIPAA/15817.html Mon, 29 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15812.html TruformAssist, a SAAS based interactive, online patient registration system designed to facilitate the collection of patient demographic and health history information over the Internet is at last introdced by PBHS, Inc. TruformAssist, created for the dental and healthcare communities, enables patients to pre-register online within a secured, HIPAA compliant environment. Patients are presented with an interactive multimedia question and answer presentation, which simplifies form completion. Data entry is an immediate and simple process. This narrated interview system enables a more accurate form completion process, which takes 30% less time than completing a standard healthcare form. J. R. Levine, President of PBHS, Inc. stated, TruformAssist tackles obstacles most practices are confronted with on a daily basis - becoming paperless and facilitating workflow in the office. The interview process, narrated by human voice, engages and comforts the patient. The branched logic within the ap http://www.compliancehome.com/news/HIPAA/15812.html Mon, 29 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15810.html Quick Service Restaurants (QSRs) are confronting a major challenge: achieve PCI (Payment Card Industry) Compliance to protect credit card transactions or face hefty fines for not meeting the guidelines. Financial regulators, banks and other acquirers that handle the growing flood of credit card transactions are imposing this regulation nationwide and pressuring operators to invest time and money to become compliant. SecureConnect, an Internet security and connectivity service specifically designed for QSR and retail markets, is the comprehensive, turn-key solution to ensure that owner/operators are doing what is necessary to become PCI DSS compliant. http://www.compliancehome.com/news/PCI/15810.html Fri, 26 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/OSHA/15800.html The U.S. Department of Labor's Occupational Safety and Health Administration (OSHA) announced that it is continuing its countrywide program to stress workplace safety and health for federal workers and for those contractors whose work is supervised on a daily basis by federal agency personnel. http://www.compliancehome.com/news/OSHA/15800.html Thu, 25 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15797.html Inbound/ outbound call center and answering service AmeriCall has earned industry-standard PCI compliance and Hacker Safe certification, the company recently announced. The two designations were attained to further AmeriCall's dedication to offering secure call center solutions and protecting sensitive user information. AmeriCall General Manager Scott Hager said, We provide customer support, ordering assistance, shipment tracking, and fulfillment-integration services nationally to a vast range of web-based businesses. As we are a leading provider of website customer service, it has become increasingly important for us to protect the safety of our clients' and their customers' information. http://www.compliancehome.com/news/PCI/15797.html Thu, 25 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15796.html Element Payment Services announces the launch of the PCI Compliance Quiz Widget, created to help widen the knowledge base of Payment Card Industry (PCI) compliance. The PCI compliance standards were developed by the major payment card brands, under the umbrella of the Payment Card Industry Security Standards Council, in response to a recent growth in data security breaches. They apply to all businesses that handle payment cards. http://www.compliancehome.com/news/PCI/15796.html Thu, 25 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/FDA/15795.html The first generic version of the emergency contraceptive Plan B (levonorgestrel) tablets, 0.75 mg gets the approval from the U.S. Food and Drug Administration. The generic product will be available by prescription only for women ages 17 and under. http://www.compliancehome.com/news/FDA/15795.html Thu, 25 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15794.html A self-regulating division of Verizon Business, ICSA Labs , announced the availability of new reports that can help businesses that store, process or handle credit card transactions comply with industry requirements for the secure handling of this data. Payment Card Industry Data Security Standard (PCI DSS) Product Capability Assurance Reports assist organizations handling sensitive cardholder data in selecting ICSA Labs certified computer and networking security products that also help the organization meet PCI standards. In addition, the reports can guide businesses in choosing additional products and taking other security measures that may be necessary to achieve full compliance with the PCI security standard. http://www.compliancehome.com/news/PCI/15794.html Wed, 24 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15790.html Clear Blue Security, a universal leader in computer network security monitoring, PCI compliant software that helps merchants and retail businesses achieve and maintain security during debit and credit card transactions.Payment Card Industry (PCI) is a worldwide information security standard assembled by the Payment Card Industry Security Standards Council (PCI SSC). The standard, which is currently comprised of 12 guidelines, was created to help organizations that process card payments prevent credit card fraud through increased controls around data and its exposure to compromise. The standard applies to all organizations which hold, process, or pass cardholder information from any card branded with the logo of one of the card brands, including shopping cart sites, e-commerce and retail merchants and other merchant services providers. http://www.compliancehome.com/news/PCI/15790.html Wed, 24 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15789.html The procedure of using an unrelated string of numbers and/or letters to represent and access securely stored credit card information so that the actual card number does not have to be exchanged between merchants and processors over the Internet is known as Tokenization. It is used to securely process stored or recurring billing credit card information. With the constant use of the tokenization process, BluePay goes above and beyond the PCI (Payment Card Industry) requirements. PCI requirements are a set of comprehensive standards for enhancing payment account data security. Developed by the founding payment brands of the PCI Security Standards Council, the PCI requirements were formed to help facilitate the broad adoption of consistent data security measures on a global basis. http://www.compliancehome.com/news/PCI/15789.html Wed, 24 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15786.html Sipera Systems, the leader in real-time Unified Communications (UC) security, announced a collaboration with TrustNet to heighten the secure handling of credit card data in enterprises that are deploying VoIP and Unified Communications while complying with the industry standard for payment card security.Enterprises in a range of industries are adopting UC, which includes voice, video, IM, collaboration and other real-time communications traversing converged infrastructures. UC and VoIP offer dramatic cost savings and new modes of interaction among customers, partners, employees and the supply chain. But with UC and VoIP, these communications now share many of the same data networks and resources that are used for carrying credit card data and transaction information. As a result, enterprises must carefully evaluate the security posture of these networks and communications, especially if they seek to comply with the Payment Card Industry Data Security Standard (PCI DSS). http://www.compliancehome.com/news/PCI/15786.html Wed, 24 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15785.html A full service provider of electronic software distribution and reseller management solutions for software vendors, Avangate, announced to have obtained for its services the Level 1 PCI DSS certification (Payment Card Industry Data Security Standard), the most important security standard for the card payment industry. The PCI DSS includes a set of comprehensive requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. http://www.compliancehome.com/news/PCI/15785.html Wed, 24 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15784.html A leading provider of secure electronic payment transaction software, Jware Technologies has chosen Verizon Business to support the company's certification to a new payment card industry standard. The Verizon Business Security Solutions team is assessing Jware's payment applications to help ensure they fully meet the requirements for the new Payment Application Data Security Standard (PA-DSS) certification, which is designed to complement and reinforce the Payment Card Industry Data Security Standard (PCI DSS) certification for merchants and service providers involved in financial data transactions. Card payment solutions are developed by Jware Technologies to meet both the functional and technical requirements of secure transaction processing. Headquartered in France, the company works with financial institutions, third-party processors, retailers and companies that are deploying secure transactions services mainly in Europe, Africa, the Middle East and Latin America. http://www.compliancehome.com/news/PCI/15784.html Wed, 24 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15781.html The Nuance Dragon Medical 10.1 launched today and is available at Recorders.com. Dragon Medical transcription software provides powerful technology that enables physicians to easily dictate in real time into their electronic medical record (EMR) software and then sign, review, and make their notes available for other clinicians. This eliminates transcription costs and allows medical professionals to spend more time with patients and less time documenting care. Dragon Medical is the most widely used speech recognition system in the medical industry, used by more than 100,000 healthcare professionals. The updated release of Dragon Medical 10.1 is faster and more stable, providing up to 99% accuracy right out of the box and now supporting powerful 64-bit operating systems. For those who might have been unimpressed with previous Dragon Medical Software releases or currently use Dragon Naturally Speaking Medical 9 or lower, now is the time to upgrade to a more powerful and efficient solutio http://www.compliancehome.com/news/HIPAA/15781.html Wed, 24 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/SOX/15780.html A worldwide business consulting and internal audit firm, Protiviti Inc., announced the release of the Governance Portal version 3, a software solution to manage governance, risk and compliance (GRC). The Governance Portal incorporates Protivitis proprietary content and consulting expertise with commonly accepted governance frameworks to establish a comprehensive platform that gives organizations the visibility and insight they need to manage and mitigate critical risk and compliance issues. http://www.compliancehome.com/news/SOX/15780.html Tue, 23 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15777.html With the increasing number of contaminations from Influenza A (H1N1), organizations are investing in IT GRC solutions in order to enable business continuity and crisis management http://www.compliancehome.com/news/HIPAA/15777.html Tue, 23 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15775.html Breach Security, Inc., the leader in web application integrity, security and PCI compliance, today announced it has been selected by Everything Channel as a CRN Emerging Technology Vendor. Exclusively focused on the health and security of web applications, Breach Security technology is distinguished for its technical sophistication, ease of use and quick time-to-value. The companys channel sales grew by 500 percent in 2008, and its high-touch, high-margin reseller program is designed to fast-track certified partners to success. CRN's Emerging Technology Vendor list captures companies that are delivering high margins for solution providers with innovative and easy-to-use technology that undercuts industry giants. http://www.compliancehome.com/news/PCI/15775.html Tue, 23 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/Basel-II/15774.html A leader in governance, risk, and compliance (GRC) software solutions, MEGA, has incorporated a powerful mathematical tool to measure risk exposure into its MEGA GRC Suite, making it the first time such a capability has become part of a comprehensive GRC solution. The MEGA GRC Suite will include an expanded risk quantification and analytics component based on Bayesian scenario calculation, a proven, but advanced means to produce the complex operational risk models that experts agree are the best way to measure risk exposure and aid in decision making. http://www.compliancehome.com/news/Basel-II/15774.html Fri, 19 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15761.html VIPGift announced it has received Level One PCI DSS (Payment Card Industry Data Security Standard) certification for its loyalty and incentive programs and payment gateways. Visa has also designated the Company as a CISP (Cardholder Information Security Program) PCI DSS compliant service provider. Attaining this certification shows VIPGifts commitment to safeguarding customer card and personal information. http://www.compliancehome.com/news/PCI/15761.html Fri, 19 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15758.html URAC, a leading health care accreditation and education organization, as part of its commitment to a comprehensive review of its standards, called for public comment on revisions to its Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security standards. URAC welcomes purchasers, policy makers, consumers, health care providers, health care management organizations, health plans, electronic medical records and software companies to review the revised standards and provide feedback now through August 3, 2009. http://www.compliancehome.com/news/HIPAA/15758.html Thu, 18 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15756.html HyTrust Joins PCI Security Standards Council Virtualization Special Interest Group to Provide Leadership, Drive Standardization: Delivers new HyTrust Appliance PCI configuration template and white paper, outlining critical steps organizations can take today to mitigate risk and navigate compliance uncertainties as application servers and core infrastructure are virtualized http://www.compliancehome.com/news/PCI/15756.html Wed, 17 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15749.html HEARTLAND PAYMENT SYSTEMS SELECTS VOLTAGE SECURITY TO PROVIDE SOFTWARE FOR END-TO-END ENCRYPTION http://www.compliancehome.com/news/PCI/15749.html Wed, 17 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/SOX/15746.html A leading provider of secure online data backup, archiving and recovery solutions for service providers and businesses, Intronis, announced its auditors have approved a service auditor's review of the company, commonly known as a SAS 70. The SAS 70 process includes an in-depth examination and audit of the effectiveness of an organizations internal controls and its compliance to these controls. A SAS 70 audit is very important to both public and private companies in the United States that are required to comply with the terms of the Sarbanes-Oxley Act (SOX) of 2002, or face other similar regulatory requirements. The SAS 70 report addresses all five components of internal control outlined in the Sarbanes-Oxley legislation, namely the control environment, risk assessment activities, control activities, information and communication systems, and monitoring activities. http://www.compliancehome.com/news/SOX/15746.html Wed, 17 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15745.html A global leader in infrastructure software for the enterprise, Autonomy Corporation plc announced that the Greater Cincinnati Behavioral Health Services (GCB) has selected its information processing solutions to securely capture, route, store and manage its patients records. With Autonomy, GCB's more than 300 clinicians will be able to view all of their patients' records online, rather than having to make a physical trip to the records department. The health institution expects that this will translate into significant savings of $1.5 million each year, while increasing its employees' productivity. http://www.compliancehome.com/news/HIPAA/15745.html Wed, 17 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/FISMA/15744.html Verizon Business will help federal agencies streamline and secure their various Internet connections under a new U.S. General Services Administration award .The GSA selected Verizon Business to provide Managed Trusted Internet Protocol Services (MTIPS) under the federal Networx Universal program. The GSA developed MTIPS to help agencies comply with the Office of Management and Budget's Trusted Internet Connections initiative, which mandates that agencies use fewer and more secure Internet connections. http://www.compliancehome.com/news/FISMA/15744.html Wed, 17 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/FDA/15743.html The U.S. Food and Drug Administration is taking steps to improve contact lens safety by reminding consumers of the importance of following proper cleaning and storing procedures. Consumers who do not follow instructions for contact lens care and use increase their risk of serious eye infections that can lead to blindness. http://www.compliancehome.com/news/FDA/15743.html Wed, 17 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/OSHA/15742.html A unique regional emphasis program aimed at reducing occupational exposure to lead, one of the leading causes of workplace illnesses, for workplaces under OSHAs jurisdiction in the Midwestern states of Iowa, Kansas, Missouri and Nebraska is announced by the U.S. Department of Labors Occupational Safety and Health Administrations (OSHA) office in Kansas City. http://www.compliancehome.com/news/OSHA/15742.html Tue, 16 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/ISO-27002-(17799)/15736.html SECUDE released version 7.0 of Secure SignOn furnishes with enhanced support for Web, Windows, Java and Terminal applications as well as a brand new learning wizard for maximum user convenience and ease of administration. http://www.compliancehome.com/news/ISO-27002-(17799)/15736.html Tue, 16 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15734.html The leading provider of healthcare connectivity services, RelayHealth,announced that its PatientCompass online business office solution has been validated as compliant with the Payment Card Industry Data Security Standard (PCI DSS). RelayHealth achieved Level 1 Service Provider Certification, the most stringent level of compliance, demonstrating that the company has met PCI DSS requirements. This certification helps protect consumers and healthcare organizations against the risks of security breaches resulting in payment card fraud. http://www.compliancehome.com/news/PCI/15734.html Tue, 16 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15732.html RedSeal Systems announced RedSeal Network Advisor 4.0, the industrys first enterprise-wide network security assurance software to address the accelerating trend of data breaches worldwide. RedSeal Network Advisor incessantly analyzes the end-to-end interaction of firewalls, routers and load balancers throughout an organization to comprehensively identify security holes in the infrastructure. RedSeal also validates that corporate network security policy is enforced, enables rapid remediation of unintended exposures and demonstrates regulatory compliance to auditors. http://www.compliancehome.com/news/PCI/15732.html Mon, 15 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/FDA/15730.html The U.S. Food and Drug Administration has learned that some stolen vials of the long-acting insulin Levemir made by Novo Nordisk Inc. have reappeared and are being sold in the U.S. market. Three lots or a total of 129,000 vials of this product were stolen in all. These stolen insulin vials may not have been stored and handled properly and may be dangerous for patients to use. http://www.compliancehome.com/news/FDA/15730.html Mon, 15 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/Basel-II/15726.html A leading provider of risk solutions for banks, financial institutions and corporates, CRISIL Risk Solutions, announced that it has signed an agreement with IDBI Bank Limited, to help it meet the Advanced Basel II approaches. CRISIL Risk Solutions is a division of CRISIL Risk & Infrastructure Solutions Ltd., a 100 per cent subsidiary of CRISIL Limited. http://www.compliancehome.com/news/Basel-II/15726.html Mon, 15 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/GLBA/15725.html An OEM agreement to integrate Stimulus archiving software, MailArchiva, with Bynaris email server, Insight Server 4.3. is announced by Bynari, Inc. and Stimulus Software. It provides an enterprise archiving solution that runs under Linux. It is compatible with Bynaris Insight Server. http://www.compliancehome.com/news/GLBA/15725.html Mon, 15 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/OSHA/15724.html A national safety-consulting and training company, McHaney & Associates, Inc., has issued an Industry Alert to assist healthcare employers in meeting respiratory compliance in the wake of the designation of H1N1 Influenza, commonly referred to as Swine Flu, as a Pandemic. According to President and Principal Consultant, Ronald McHaney, 30 million healthcare workers are now subject to OSHA Respiratory Compliance requirement. http://www.compliancehome.com/news/OSHA/15724.html Fri, 12 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/OSHA/15719.html Nationwide Oil refineries have received letters from the U.S. Department of Labor's Occupational Safety and Health Administration (OSHA) emphasizing the need to comply with all applicable OSHA standards, particularly the Process Safety Management of Highly Hazardous Chemicals (HHCs). Letters recently were sent to the management of more than 100 oil refineries providing them with data on compliance issues found under OSHA's Refinery National Emphasis Program (NEP) and urging the refiners to comply with their obligations under the process safety management (PSM) standard. The standard requires employers to develop and incorporate comprehensive, site-specific safety management systems to reduce the risks of fatal or catastrophic incidentsor contact their local OSHA offices. http://www.compliancehome.com/news/OSHA/15719.html Fri, 12 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/OSHA/15718.html The U.S. Department of Labor's Occupational Safety and Health Administration (OSHA) has cited East Central Machine & Tool Co., St. Clair, Mo., for alleged safety and health violations and proposed $117,900 in penalties. OSHA cited the company following an investigation into an accident where an employee lost two fingers in a mechanical power press. The inspection found one alleged willful and 11 alleged serious violations of the Occupational Safety and Health Act. http://www.compliancehome.com/news/OSHA/15718.html Fri, 12 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/FISMA/15717.html Universal reports about cyber security threats to America's infrastructure are accurate and the number, types and sophistication of the attacks are predicted to increase, the House Subcommittee on Government Management, Organization and Procurement was told today by the head of cyber security for EDS, an HP company. Its been testified by Samuel Chun, director of EDS' U.S. Public Sector cyber security practice that to combat those threats, Congress and the executive branch should revise the Federal Information Security Management Act of 2002 (FISMA). While the positive contributions of FISMA are apparent, there is a general consensus that FISMA does, in fact, need reform, Chun told the subcommittee. Chun said complying with current federal reporting requirements has become burdensome with too much emphasis on the generation of paper reports. http://www.compliancehome.com/news/FISMA/15717.html Thu, 11 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/OSHA/15716.html The Department of Industrial Relations (DIR) in union with its Division of Occupational Safety and Health, better known as Cal/OSHA, has requested that the Occupational Safety and Health Standards Board (OSHSB) adopt emergency amendments to the current heat illness prevention standard, section 3395 of Title 8 of the California Code of Regulations. http://www.compliancehome.com/news/OSHA/15716.html Thu, 11 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15711.html In an nnoucement SHPS declared that it has earned re-accreditation for five of its Carewise Health programs from URAC, a Washington, DC-based healthcare accrediting organization that establishes quality standards for the healthcare industry. The five programs to receive URAC re-accreditation are: case management, disease management, utilization management, workers' compensation utilization management, and health call center. http://www.compliancehome.com/news/HIPAA/15711.html Wed, 10 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/SOX/15706.html A Web-based portal, ALaS DocPort(TM), that can improve operational control and mitigate risk for hedge funds, investment banks, insurance companies, asset management firms and brokerages, has been introduced by ALaS Software. Creating a transparent, standardized picture of an organization's processes and procedures for auditors, regulators and investors is crucial to the successful performance of any financial business, said Wesley Archer, president and co-founder of ALaS Software. http://www.compliancehome.com/news/SOX/15706.html Wed, 10 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15701.html A new release of data loss prevention solution, LeakProof 5.0, with added features and benefits designed to reduce the complexity and cost often associated with the discovery, monitoring and blocking of sensitive data is unveiled by Trend Micro. LeakProof protects sensitive information such as customer and employee data is protected by LeakProof . It also guards intellectual property by monitoring and preventing information leaks across multiple threat vectors. http://www.compliancehome.com/news/PCI/15701.html Tue, 09 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/HIPAA/15699.html An enhanced data breach preparedness program idesigned to help healthcare organizations guard against physical, cyber and security issues that may give rise to identity theft risks is launched by Kroll. The announcement comes just two months prior to the Aug. 1 deadline for the Federal Trade Commission Red Flag Rules, which require the implementation of an Identity Theft Prevention program by all organizations including healthcare facilities that extend lines of credit to consumers. http://www.compliancehome.com/news/HIPAA/15699.html Mon, 08 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15697.html A global leader for brand protection, loss prevention, risk management and security consulting services, PICA Corporation, welcomes Ken Branch as its new Senior Director of Security Consulting. He will be based in the firm's Riverside, California office. http://www.compliancehome.com/news/PCI/15697.html Mon, 08 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15695.html Small business owners and merchants are an vital part of the safety of consumers' personal financial information, yet few businesses are compliant with the new PCI Data Security Standards developed to protect American consumers. PCI DSS was created by five major credit card companies in response to the growing problem of credit card number theft, which has directly contributed to the exponentially growing problem of identity theft that costs consumers, merchants and financial institutions $51 billion a year.1 (2008, Javelin Strategy & Research Report). http://www.compliancehome.com/news/PCI/15695.html Mon, 08 Jun 2009 00:00:00 CST http://www.compliancehome.com/news/PCI/15694.html A provider of electronic billing and payment (EBP) technology and customer service solutions to healthcare providers, utility companies, municipal governments and other organizations, Internet Payment Exchange, announced the launch of eHealthPay ServiceSM, an affordably priced, PCI DSS certified, online payment solution designed for healthcare providers who want to offer electronic payment options to patients and guarantors. http://www.compliancehome.com/news/PCI/15694.html