Innovative Business Solutions Improving the Protection of Health

Innovative Business Solutions Improving the Protection of Health Information Health Network Surveillance

Health Information Realities Healthcare organizations today are subject to: • • • Increasing risk, Over reaching regulatory compliance, Scrutiny over legal and public liabilities. Reactionary strategies seem to be the norm in protecting PHI across the continuum: • • Inconsistent privacy and security definitions, Sporadic monitoring and surveillance, Accepted risk against published standards Expensive 3 rd party audits Health Network Surveillance

The Privacy Dilemma The Healthcare system is caught between powerful forces: § Restrictive privacy protection requirements § Expanding technological capacities focused on serving broader health applications § Evolution of mobile computing for health management § Increasing access demands by care givers and patients § “Lock-box” process in policy vs. in practice. Health Network Surveillance

The Healthcare IT Challenge • A complex environment that seeks a balance between protection of privacy and the delivery of quality care • Management of complex networks with increasingly integrated data applications • Health network performance which supports applications and related requirements enabling proactive intelligent alerting • An economical approach is warranted; ensure a sustainable solution to compliance through automation and efficiency, regardless of platform, size or complexity. Health Network Surveillance

Health Network Surveillance • Surveillance of healthcare networks requires real-time rulesbased monitoring of key compliance indicators for the protection of critical health information • Surveillance enables our customers to constantly manage and monitor their data, perform automated assessments and independent reviews, manage and retain audit trails of access to protected information, and conduct comprehensive analyses of the propriety of user and data access. • Surveillance of Personal Health Information: when it was accessed, how much was accessed, by whom and from where. Health Network Surveillance

Presi. NET Healthcare has been specifically designed to meet the unique needs of the health informatics customer to provide comprehensive » Privacy Assurance, » Regulatory Compliance » Business Intelligence » Network Management Presi. NET Healthcare is the ultimate enterprise platform for Health Network Surveillance, providing dynamic assurance of Patient Health Information protection Health Network Surveillance

Return on Investment • Presi. NET Healthcare is a highly cost-effective, comprehensive solution for the protection of personal health information, with comprehensive network traffic analysis capabilities. • Delivers a positive return on investment in a few short months by; • Automating compliance reporting • Mitigating legal risks and risk assessments • Assuring the protection of Health Information • Simple to implement and easy to use. Health Network Surveillance

Multiple Solution Perspectives Regulatory Compliance & Business Analytics Visibility, Performance, Security Assurance Health Network Surveillance

Healthcare Solutions Health Assurance • Regulatory Compliance • Lock Box File Management Business Intelligence • Utilization Management • Application Dash boarding • Remote Access logging • Packet –Trac File Management Network Performance • Network Visibility • Network Security • Network Compliance Consulting Services Health Network Surveillance • Consulting • Enhancement • Reporting

Health Privacy Assurance • Health Information Technologies have tremendous potential to improve health care quality, provide immediate access to critical patient information and reduce costs • Restrictive access may only limit care, but surveillance and proactive behavior monitoring and alerting, mitigate the risk providing for accurate real time compliance monitoring Health Network Surveillance

Regulatory Compliance Audit Reporting : • • All TCP connections HIPAA PIPEDA PHIPA ISO Sarbanes Oxley PCI Canada Health Info. Way Health Network Surveillance Configurable Reports • Scheduled reporting • Management Audit Reporting • Investigative analysis • Meets Health Regulatory laws, Regulations and Guidelines Application: • Enables users to monitor, investigate and audit with a “forensic” capabilities in real -time or historically, meeting legal requirements for health providers

“Lock-Box” Protection “Lock-Box” Requirements • Mandatory Ontario PIPEPA • Consent based Statute • Prevents disclosure of PHI without consent • Prevents unlawful use of PHI by 3 rd party without consent Health Network Surveillance Functionality; • Tagging process along with automated alerts • Assign status • Alarm on access Application; • To comply with patient request to block, limit or prevent the unauthorized access to patient health information

Business Intelligence Presi. NET Healthcare’s business analytics solutions provide real-time performance monitoring of KPI’s providing insights to improved clinical outcomes, and business specific application performance Health Network Surveillance

Utilization Management Business Requirements: • Measure transactional processes • Monitor key performance indicators • Measure utilization of Systems • Monitor “down time” of and utilization rates • Capacity monitoring Utilization: • Fee per study/patient payment model • Modality utilization and optimization • Measure contracted system uptimes Application: • Real-time monitoring of HL-7, and DICOM messaging from medical devices enabling the calculation of system performance and transactional based payment programs Health Network Surveillance

Remote Access Control Connection Auditability: • Privileged user access • Access to restricted resources • Restrictive access to specific systems and files • Denied connections • Application Reboots • Manage data removal for troubleshooting Health Network Surveillance Functionality • Allows 3 rd party vendors to remote manage hardware and application systems • Audit access by foreign systems • Prevents 3 rd party roaming Application: • The accurate management and control of foreign access of 3 rd party vendors for the maintenance, service and support of health devices and systems

Application Dashboards Comprehensive views • Configuration of disparate applications • Single integrated view of system performance • Reporting on multiple file types • Monitoring of system integration points • Capacity Application: • User configurable reporting • Integrates multiple applications into single enterprise view • Trouble shooting of multi site and application integrations Application: • Allows for the configurable reporting in a single dashboard for multiple application systems such as; • EHR- Electronic Health Record • • Health Network Surveillance CIS Systems- Clinical Information Systems Regional or multi-site applications

Packet–Trac File Management Multi-Application Tracking HL-7 Messaging Deep Packet Inspection (Layer 7) Connection Based Tracking Provides over 320 views into the network - Tracks 100% of all Network Traffic in Real Time (no sampling) - Provides Deep Packet Application identification ( HL-7, DICOM) - Analyzes all connections from start to finish - Identifies and tracks all “State” changes - Generates Performance Statistics on all TCP connections - Provides Real-Time Behavioral Analysis Health Network Surveillance

Performance Management Presi. NET Healthcare’s standalone appliance, draws a complete picture of network activity, with over 320 views, dynamically monitors, driving faster informed decision making. With every network transaction captured, Presi. NET Healthcare allows the ability to assess your network performance and align it with your business processes Health Network Surveillance

Network Performance Audit Performance By: • Connection loads • Applications • Systems • Bandwidth • Users • Amount of Data • Destination • Latency / Jitter • Connections’ Loads Performance Alerts: • Thresholds • Profiling • Trending • Capacity Application : • Allows your IT department to monitor and support privacy business objectives through; • Network Performance • Application Performance • Identify Bottlenecks Health Network Surveillance

Network Security Connection Auditability: • External Accesses • Virus/Trojan Behaviors • Access to restricted resources • Un-replied Connections • Denied Connection Attempts • Collapsed Networks • Application Reboots • Layer 7 Auditing • Security Alerts Audit for Policy Violations: • Who • What • When • Where Application: • Allows your IT department to monitor and support privacy business objectives through • Behavioral Analysis & Trending • Baseline Usage • irregular traffic modules Health Network Surveillance

Network Compliance Connection Data includes all: • All TCP connections • Active Directory user names • Machine name • MAC Addresses Active Secure Logging • Data Back-up • Reliable back-up routines • Encrypted • Digitally signed Application: • Allows your IT department to monitor and support privacy business objectives through • Secure and complete record • • Health Network Surveillance Independently sourced record Tamper proof logs Reports on log access Requirement for legal reporting

Network Visibility Bandwidth and Connection Auditability: • • Employee Usage Mystery Bandwidth New Users and Applications Top Bandwidth Users Top Applications Web Usage P 2 P Applications Performance Alerts: • Thresholds • Profiling • Trending Application: • Allows your IT department to monitor and support privacy business objectives through • Application Performance • Planning & Policy Mgmt Health Network Surveillance

Capacity Planning Bandwidth and Connection Auditability: • • • Employee Usage Bandwidth /Mystery Bandwidth New Users and Applications Top Bandwidth Users Top Applications Connection Loads Amount of Data Destinations Web Usage P 2 P Applications Health Network Surveillance Performance Alerts: • Profiling • Trending • Capacity Application: • Allows your IT department to support business objectives through • Application network Performance in Real-time and Historically • Architectural and Capacity Planning

Professional Services Presi. NET Healthcare’s comprehensive suite of professional consulting services work with the customer’s technical compliance and best practice assessments to ensure that vulnerability and risk management efforts successfully map to your broader compliance and business risk objectives. Health Network Surveillance

Professional Services Deployment Services • Deployment services designed to assist in the initial deployment, complementing your existing resources. Enhancement Services • Enhancement services extend and tailor the core functionality to address specific customer needs. • Supplemental training or refresher sessions. • Periodic Network Performance reporting. Compliance Reporting • Compliance assessment service evaluate the customer's current security status against its compliance strategy. Health Network Surveillance

Client Side and VM Server Architecture Business Categories Medium-Business Large Business Enterprise • • • Users/Nodes Model 250 - 1000 - 2000 - 5000 HC 1 M HC 2 M HC 5 M Servers are designed to hold data accessible for 30 months All logs are archived and recoverable as needed Specialized appliances can be developed as needed Servers are supported by sensors scaled to the environment Both physical and virtual sensors are available Health Network Surveillance

Intuitive User Interface Intelligence Privacy ØAnomalous Traffic ØProfiles Performance ØUtilization Management ØLatency ØJitter ØRemote Access Management ØFile Tracker ØPolicies ØHIPPA ØPIPEDA ØType of Service ØUser Stats ØApplication Dashboarding ØCHI ØISO ØReports ØCapacity Planning ØReports Analysis ØCapacity Planning ØUser ØApplication ØWeb ØApplications Bandwidth Config ØSummary ØSettings ØUser Stats ØBack-up ØApplications ØProfiles ØThroughput ØPolicies ØTrouble shooter ØAdmin ØReports ØThroughput ØReports Health Network Surveillance ØReports

Presi. NET Healthcare provides regulatory compliance monitoring with real-time auditability, measurements of business systems metrics and reporting. Presi. NET Healthcare’s standalone appliance, draws a complete picture of network activity, driving faster informed decision making. The most cost effective, comprehensive solution for Health Network Surveillance and auditability in the market today Health Network Surveillance

Contact Paul Shumate Executive Vice President Presi. NET Healthcare 949 481 3146 pshumate@presinet. com Health Network Surveillance