AWS HIPAA compliance
Simplify AWS HIPAA compliance with AlienVault USM Anywhere.
Simple, scalable AWS security and compliance
Centralize AWS security monitoring
USM Anywhere automatically collects and alerts on security data from critical AWS services such as CloudTrail, CloudWatch, and S3 and ELB access logs, centralizing and simplifying your AWS security monitoring.
Get threat intelligence built for AWS
Alien Labs’ threat intelligence includes AWS-specific correlation rules, so you can detect the latest threats, vulnerabilities, misconfigurations, and anomalous behaviors in your AWS environment.
Scale security with your cloud
USM Anywhere is a cloud-hosted SaaS platform that readily scales as your IT environment evolves. It’s fast and easy to deploy with no hardware to install.
Eliminate blind spots and shadow IT
Centrally monitor your multi-cloud and on-prem assets with a unified platform to ensure continuous threat coverage and the elimination of shadow IT as you migrate data and services to the cloud.
Discover DevOps-friendly security
Support your agile development with automated security monitoring across build, test, and production environments and leverage our integrations with DevOps tools like PagerDuty, Slack, Jira and others.
Simplify compliance in the cloud
Ensure your AWS environment adheres to key regulatory or industry compliance mandates, such as PCI DSS, HIPAA, or GDPR. Learn how USM Anywhere simplifies IT security compliance in AWS.
Accelerate Your Path to HIPAA Compliance with AlienVault USM Anywhere
Traditional point security products aren’t sufficient for meeting AWS HIPAA compliance requirements and keeping up with today’s changing cyber security landscape. They’re costly, complex, challenging to manage, and in many cases incompatible with AWS. In fact, based on a LinkedIn survey (2016), 59% of respondents said their traditional security solutions work somewhat or not at all when it comes to monitoring cloud environments like AWS.
AlienVault® Unified Security Management™ (USM) is a cloud-native, scalable, and centrally managed collection of essential security capabilities, helping you satisfy the HIPAA Security Rule. Using its purpose-built sensor that integrates tightly with AWS APIs, USM Anywhere helps you to quickly identify suspicious or malicious behavior in your AWS environment.
The AlienVault USM platform delivers multiple security essentials to help you prepare for your next HIPAA audit faster and more easily, and in a single, unified platform:
- Discover all your AWS environment assets, including OS details, while satisfying AWS scanning policies
- Identify systems with vulnerabilities, understand which assets are high-, medium-, and low risk, and identify any available patches or workarounds
- Intrusion detection detects threats including malware and ransomware that are active in your network with advanced, automatic correlation
- Identify both successful and failed logon attempts, and monitor user and administrator activities
- Speed incident response with built-in remediation guidance for every alarm, and integrated orchestrated responses that can be manually or automatically executed
- Collect events from across your on-premises and cloud environments and cloud applications for analysis, and store them for at least 12 months
- Be assured that you’re protected with continuously updated threat intelligence delivered automatically to the USM platform, including the latest correlation directives, vulnerability assessment signatures, IDS rules, guided threat responses and more
- Easily report on security controls required for HIPAA requirements with predefined HIPAA reports, and the ability to create new custom reports and views to meet reporting requirements specific to your organization
Our Cybersecurity is trusted & verified
Our Cybersecurity makes compliance a top priority for your organization and for ours. We have adopted the NIST Cybersecurity Framework (CSF), aligning our security controls and processes with industry-proven security best practices. We use our own USM platform to demonstrate and maintain compliance, working with third-party auditors to regularly test our systems, controls, and processes.
* The ISMS that governs USM Anywhere, USM Central
Threat Detection for Healthcare Organizations
According to the Sixth Annual Benchmark Study on Privacy & Security of Healthcare Data (2016), 89% of healthcare organizations suffered a data breach. It’s impossible to stop a persistent attacker from penetrating even the most secure defenses. Therefore, it’s essential to detect and respond to attacks as quickly as possible.
At AlienVault, we help healthcare organizations of all sizes achieve world-class threat detection and meet AWS HIPAA compliance requirements without the headaches and huge expense of other solutions. Our unified approach puts hours back in your day with automated threat detection and integrated threat intelligence that eliminate manual, time-consuming log analysis and threat research.
AlienVault has helped healthcare organizations like Shriners Hospitals, Kaiser Permanente, and Novo Nordisk accomplish these key tasks:
- Identify vulnerabilities on assets that store electronic protected health information (ePHI)
- Maintain an audit log of who has accessed systems containing ePHI, helping meet audit management requirements
- Identify systems communicating with malicious IPs or domains, a sign of possible compromise
- Identify and respond to security incidents, including containment or remediation advice for every alert
Comprehensive Reporting and Log Management for HIPAA Compliance in AWS
HIPAA Standard § 164.312(b) — Audit Controls states that you must "Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information." AlienVault USM Anywhere provides built-in and customizable HIPAA reports, along with intuitive dashboards and customizable views, that simplify adherence to this standard with an easy-to-use interface.
HIPAA Compliance Standard § 164.312(c)(2) deals with data integrity and requires that any covered organization, “Implement electronic mechanisms to corroborate that electronic protected health information has not been altered or destroyed in an unauthorized manner.” With its AWS-native sensor, USM Anywhere helps entities satisfy this requirement by providing mechanisms for collecting and analyzing host logs, data sent over syslog, AWS CloudTrail and AWS CloudWatch logs, and AWS S3 storage logs. Additionally, it will create events and meta data for event response prioritization, and future auditing and reporting.
