" email archival Archives - LuxSci

Posts Tagged ‘email archival’

10 Tips for Preventing Ransomware Attacks

Tuesday, November 10th, 2020

You’re already working long hours.  Covid-19 is not letting up and your team is running on empty. Now you need to mitigate yet another virus of a different kind. If you are hoping to escape a ransomware attack and its extreme financial impact (an average of $8,500/hour of downtime), the following are essential and easy-to-follow tips with which to arm IT and general Healthcare administrators.

Avoiding Ransomware

Read the rest of this post »

What Is Email Archiving and Why Do I Need It?

Thursday, November 1st, 2018

The digital era has changed many things about the way people communicate. In the case of businesses and organizations, especially in the healthcare sector, the changes have been significant. For instance, the threat of fraud and data theft is forcing businesses to keep track of all the messages shared between employees and stakeholders.

Despite the availability of multiple communication tools, email is still the most preferred option for large-scale corporate and organizational-level communication. It estimated that over 250 billion emails are sent each day.

A business with just 1000 employees can generate around 40,000 emails per day. Needless to say, that’s a phenomenal number of emails and keeping track of each one can be tedious. However, it needs to be done, considering the fact that many of those emails contain critical information. In the case of healthcare organizations, those emails can even contain confidential patient data.

Email Archiving is the Answer

It is required that healthcare providers and organizations engaging in HIPAA-compliant emails practice email archiving. Email archiving allows healthcare companies to make things easier by providing them with the confidence that their communications are protected from prying eyes, while also being accessible to authorized personnel via as needed, even during emergencies and email system outages.

Read the rest of this post »

Email Archival is Required by HIPAA

Tuesday, February 6th, 2018

Customers constantly inquire if Email Archival services are really required by HIPAA regulations.

There is a great deal of confusion and uncertainty here because:

  1. HIPAA by its nature is vague, listing many things that you need to do, but not saying how.  This makes things flexible and workable, if ambiguous.
  2. Email Archival generally adds cost to any email solution — and everyone prefers to avoid unnecessary costs.
  3. Most want to do the minimum needed for compliance due to time and budgetary constraints.

Email Archival is Required by HIPAA

In our opinion, Email Archival is an implicit requirement of HIPAA for all organizations that utilize email for the sending or receipt of ePHI should invest in.  In the next section, we’ll review why.

Read the rest of this post »

Are you encouraging insecurity via your web site forms?

Friday, April 15th, 2016

Many web sites have “contact us” pages and include web forms for receiving requests from existing or potential customers. This includes “new patient intake” forms on the web sites of healthcare providers. However, if your aren’t using a secure form solution your web forms may suffer from several serious problems:

  • Spam – Getting unwanted form submissions from bots.
  • Privacy – Often, sensitive data is submitted insecurely through these forms.
  • Archival – You may need an archived record and backup of all submissions.
  • Notices – You may need to be alerted of form submissions, even if you are not online.

Proactive privacy vs. neglect of privacy

When your web forms transmit data insecurely, store or send data insecurely, or otherwise to do not treat the data submitted with the level protection that it deserves, you are putting the users of your forms at risk.

The typical argument is that “it is up to the user of the forms to decide if they want to submit sensitive information.” In fact, many insecure forms even have disclaimers requesting people to not submit sensitive information if they have concerns … and then the forms go on to ask lots of sensitive questions. Especially without a disclaimer, but even with one, the form is actively soliciting people to submit their information insecurely and requesting them to take risks with their private data. This is not good.

In areas such as healthcare, where these forms are often collecting sensitive health data (protected health information – PHI), the fact that an organization solicits the submission of PHI through insecure, non-HIPAA-compliant means is far from a “best practice.” Why does this happen?

  1. Securing forms is trivial and inexpensive. As the bar is so low to collecting data in a compliant way, it could be considered neglectful to not bother with security and privacy and continue to solicit data insecurely.
  2. People can insecurely send you their own, personal PHI any time … when it is done of their own accord. However, when you provide them with a recommended communication channel, and when that channel is not secure, you need to get informed consent from them before you accept the data through that channel. Informed consent means:
    1. Training them in the risks involved.
    2. Getting their explicit sign off indicating their acceptance of these risks.
    3. Capturing and saving those signed consent forms.

Getting signed consent must be properly done and it imposes a barrier in front of your forms. There is really no reason to go though all of the work to setup informed consent when it is much simpler to just secure the forms themselves.

You can block form spam, ensure content security and privacy, archive form submissions, and even get text message notices of new submissions to your phone using LuxSci SecureForm. And it takes only a couple of minutes to integrate a secure form into any existing web site at any web hosting provider.

How does SecureForm Integrate with a Web Site Form?

SecureForm is very easy to set up and integrate. You configure SecureForm account with what you want to happen to your form data. Then you change one line of your web form (where the form posts go) and copy and paste a line of JavaScript into that page. Setup takes about 5 minutes.

How Does SecureForm deal with Spam, Encryption, Archival, and Notices?

SecureForm blocks web robot spam by determining if a real person is connecting to your form and blocking submissions from anything that is not.  Your users do not have to enter any security codes or image (Captcha) codes — the system simply checks that they are using a modern web browser with cookies enabled and JavaScript working. Most web bots do not support one or both of these standard technologies; all modern browsers do.

SecureForm enables privacy and security by allowing you to ensure that the form data is encrypted from the end user all the way to your email inbox. It enables automatic use of secure email delivery, secure FTP uploads, secure online document storage, and more. You can use any or all of these data capture methods.

SecureForm enables archival by allowing you to save copies of all form posts in an online document storage area, by uploading copies to your own FTP site, and/or by saving copies in a database that you can access as needed.

SecureForm enables notices by allowing you to have text messages sent to up to 5 different mobile devices when each form post is submitted. This is in addition to the form data being emailed to where it needs to go. You and you staff can be informed in real time of new posts, no matter where you are.

LuxSci SecureForm is the swiss army knife of web and PDF form processing tools, integrating quickly with any existing web sites and providing form security even if your web site is not already secured with TLS.

LuxSci as Secure Connector for Gmail = LuxSci Email Encryption for Google

Monday, June 8th, 2015

Gmail and Google Workspace users can route their outbound email through LuxSci to take advantage of SecureLine email encryption, which enables HIPAA compliant sent messages, plus LuxSci’s extensive outbound email management tools.  If you prefer the Google interface or need to use it for some reason, but require encryption and/or compliance, you can meet your needs by adding on LuxSci.

Google Apps

Read the rest of this post »

LUXSCI