1. The Internet of Things Survey is Calling You To Take It and enter to win an iPad!
o
o
Current Site
Security Training
o
Choose a different site
o
Security Certification
o
Cyber Security Graduate School
o
Internet Storm Center
o
Security Awareness Training
o
Computer Forensics
o
Penetration Testing
o
o
IT Audit
Software Security
Secure Access / Login
o
o
o
o
o
o
o






Find Training
Search For Training
Upcoming Events
Course List
NetWars
Ways To Train
Without Travel
Training Curricula »
Security
Management
Forensics
Secure Software Development
Penetration Testing
System Administration

2. 




o
o
o
o
o
o
o
o
o
o
o
o
o
o
o


o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
o
About SANS
Incident Handling
Intrusion Analysis
Audit
Legal
Cyber Guardian
Group Discounts
Calendars
Live Training
Search For Training
Upcoming Events
Summits
Community Events
Mentor
OnSite
Work Study
COINS
Online Training
Search For Training
CyberCon
vLive
OnDemand
Simulcast »
Event
Custom
Security Awareness
SelfStudy
Programs
Voucher Credit
Cyber Guardian
Cyber Ranges
Hacker Guard
Cybersecurity Innovation Awards
Enterprise Solutions
CISSP Get Certified
DoD 8570
Resources
Reading Room
Webcasts
Newsletters
Blogs
Top 25 Programming Errors
Top 20 Critical Controls
Security Policy Project
From Vendors
Additional Resources
Vendor
Overview
Sponsorship
Demographics
Events
Contact
About

3. Why SANS?
Instructors
Contact SANS
SANS FAQ
Link to SANS
Press Room
PGP Key
PGP Key - Local Copy
HIPAA Security Policy: Health Insurance
Portability and Accountability Act
Example Infosec Policy or Template
Is it a Policy, Standard or a Guideline?
About the Project Director
Need a Primer on Security Policies?
Incident Handling Forms
Questions or Policy Submissions
Audit Security Policy
Computer Security Policy
Desktop Security Policy
Email Security Policy
HIPAA Security Policy
Internet Security Policy
Mobile Security Policy
Network Security Policy
Physical Security Policy
Security Policy Whitepapers
Server Security Policy
Wireless Security Policy
What is all the hype on HIPAA Security Policy?
HIPAA stands for Health Insurance Portability and Accountability Act.
From the HIPAA FAQ:
Passed in 1996, HIPAA is designed to protect confidential healthcare information through improved security
standards and federal privacy legislation. It defines requirements for storing patient information before, during and
after electronic transmission. It also identifies compliance guidelines for critical business tasks such as risk analysis,
awareness training, audit trail, disaster recovery plans and information access control and encryption.
Complying with Security Standards
There are 18 information security standards in three areas that must be met to
ensure compliance with the HIPAA Security Rule.
The three areas are:
Administrative Safeguards: Documented policies and procedures for day-to-day operations; managing the conduct
of employees with electronic protected health information (EPHI); and managing the selection, development, and use
of security controls.
Physical Safeguards: Security measures meant to protect an organization's electronic information systems, as well
as related buildings and equipment, from natural hazards, environmental hazards, and unauthorized intrusion.

4. Technical Safeguards: Security measures that specify how to use technology to protect EPHI, particularly controlling
access to it.
Management 514: Information Security Policy In Depth Course
Download Course
Excerpts Below
Infosec Policy Excerpt (pdf)
Infosec Policy Excerpt (pptx)
Latest Whitepapers
A Hands-on XML External Entity Vulnerability Training Module
By Carrie Roberts
Home Field Advantage: Employing Active Detection Techniques
By Benjamin Jackson

5. Using Influence Strategies to Improve Security Awareness Programs
By Alyssa Robinson
Latest Tweets
HAPPY HALLOWEEN from #SANS! Retweet friends about a free Mac [...]
October 31, 2013 - 2:51 PM
TrickorTreat?No tricks only treats when u buy qualifying onl [...]
October 31, 2013 - 2:34 PM
New Blog Post: Get a MacBook Air, Toshiba Satellite Ultraboo [...]
October 23, 2013 - 12:37 AM
Contact Us
(301) 654-SANS (7267)
Mon-Fri 9am - 8pm EST/EDT
info@sans.org
"Because of the use of real-world examples it's easier to apply what you learn."
- Danny Hill, Friedkin Companies, Inc.
"SANS is a great place to enhance your technical and hands-on skills and tools. I thoroughly recommend it."
- Aaron Waugh, Datacom NZ Ltd
"Expertise of the trainer is impressive, real life situations explained, very good manuals. Best training ever!"
- Jerry Robles de Medina, Godo CU
o
o
o
o
o
Current Site
Training
Choose a different site
Certification
College
o
Internet Storm Center
o
Security Awareness
o
Computer Forensics
o
IT Audit
o
Software Security
o
Penetration Testing
Find Training
Live Training
Online Training

6. Programs
Resources
Vendor
About
Privacy Policy
Trademark Usage Policy
Credits
© 2000-2013 SANS™ Institute