eGestalt Technologies, today announced a White Paper that spells outin layman’s terms what businesses need to know about the Health Information Portability and Accountability Act (HIPAA).

Santa Clara, CA, May 12, 2011 — eGestalt Technologies ( http://www.eGestalt.com ), a world leading provider of cloud-based, SaaS-delivered, security and information technology governance, risk management and compliance (IT-GRC) solutions for small to mid-size organizations, today announced a White Paper that spells outin layman’s terms what businesses need to know about the Health Information Portability and Accountability Act (HIPAA) and its associative enforcement regulation called HITECH that was signed into law on February 2009 as part of Washington’s economic stimulus package.

HITECH stands for Health Information Technology for Economic and Clinical Health. The act is designed to expand the impact and enforcement of HIPAA by defining the penalties for non-compliance of HIPAA.
The eGestalt White Paper ( http://www.egestalt.com/Whitepaper/SB.html ) highlights how not only healthcare providers but the various professionals who service them and their medical practices day to day are equally susceptible to HIPAA/HITECH regulations. These professionals affiliated with healthcare providers are defined by the regulations as Business Associates, and include “anyone who routinely exchanges or accesses Patient Health Information (PHI).”

According to HIPAA rules, Business Associates must also develop and implement written PHI security policies and procedures; they can also be audited by the U.S. Health & Human Services department and can, like healthcare providers, “easily incur penalties for failure to comply.”

“Doing a self-assessment, followed by risk analysis, is a critical step in achieving security and compliance,” says AnupamSahai, president of eGestalt and co-author of the White Paper. “Subsequently, maintaining continuous compliance by plugging the security and compliance gaps through remediation is the key to mitigating risk, reducing exposure, and assuring avoidance of the increasing threat of penalties.”

The paper demystifies security and HIPAA/HITECH, makes a strong casein support of a solution to the HIPAA/HITECH problem, advocating for the deployment of SecureGRC SB™, a patent-pending Cloud computing and automated Software-as-a-Service (SaaS) application that helps to meet these challenging privacy and security regulations at dramatically less cost and complexity than standard approaches.

Says Sahai, “SecureGRC SB demystifies security and compliance through automation of the self-assessments you need to conduct in order to accomplish this.Comprehensive HIPAA and HITECH support is simplified and built-in, easily extended, and automatically kept up to date. The self-assessment model is powerful since it begins by simply guiding the user with a set of questions.”

Once users have made their first pass,the compliance gaps are clearly communicated, SecureGRC’s risk calculator prioritizes the areas that need immediate attention first. SecureGRC SB is delivered through managed compliance providers (MCP) who leverage the built-in ‘Best Practices’ library in the solution on how best to customize and resolve each and every open issue with a common sense approach depending on the particular business deployment.

To download a free copy of the eGestalt White Paper, visit: http://www.egestalt.com/Whitepaper/SB.html

About eGestalt Technologies Inc.:
eGestalt ( http://www.egestalt.com ) is a world-class, innovation driven, leading provider of cloud-computing based enterprise solutions for information security and IT-GRC management. eGestalt is headquartered in Santa Clara, CA, and has offices in the US, Asia-Pacific and Middle East. eGestalt was nominated Breakthrough Technology Vendor atXChange Americas, Aug. 2010, and selected by SiliconIndia among the “Top 10 Security Companies to Watch.” Its SecureGRC application was voted runner-up in the Managed Services Category at XChange Tech Innovators, Nov. 2010. And in Feb. 2011 eGestaltVP of Worldwide Sales Jim Hare was been named a Channel Chief by Everything Channel’s CRN.

Press & Media Contact:
Victor Cruz, Principal
MediaPR.net Inc
For eGestalt Technologies
Santa Clara, CA
(401) 349-3369
vcruz@mediapr.net
http://www.egestalt.com

Meets demand in industry where data breaches cost $6 billion per year.

Santa Clara, CA, January 14, 2011 — eGestalt ( http://www.eGestalt.com ), a provider of information technology governance, risk management and compliance (IT-GRC) solutions for small to mid-size organizations, today announced the U.S. availability of SecureGRC SB™, a patent-pending Cloud computing and Software-as-a-Service (Saas) application that helps to meet HIPAA and HITECH privacy and security rules at dramatically less cost and complexity than standard approaches.

SecureGRC SB is first in the industry to offer an inexpensive and automated SaaS based solution to help small medical practices achieve and sustain HIPAA/HITECH compliance.

“SecureGRC SB is a patent-pending, breakthrough solution designed with the small medical practice in mind,” says Anupam Sahai, President, eGestalt. “Medical practices and their Business Associates can become HIPAA/HITECH compliant in a very cost-effective manner without requiring deep domain expertise. By leveraging our SaaS-based automated tool, which has won numerous awards, channel partners are able to deliver these packaged security and compliance services to small medical practices in a cost-effective manner thereby meeting a huge unmet demand as communicated to us by our channel partners and end-customers.”

Says Dr. Kellner of Mount Kisco, NY, a licensed psychologist and trained psychoanalyst ,”I have been practicing for over 10 years and never thought I had any reason to be HIPAA compliant. After all, I have a private practice, I’m not a hospital. But I attended a webinar by eGestalt on their product called SecureGRC SB. I quickly realized that I had several areas of exposure regarding my patients’ information. So I tried the SecureGRC SB program, as it was only $500 and was easy to use.”

“I was really surprised by the number of areas that I was exposed,” says Dr. Kellner. “Using the program I quickly identified and fixed the problems. I am now requiring all of my Business Associates to use this program to help protect my practice. I know I would never get audited, that was not my concern. I just wanted to make sure I was doing the right things to protect my patients’ privacy and this was an inexpensive and low risk approach.”

The HIPAA/HITECH Act has resulted in significant changes to the industry’s approach to data protection. To date, data breaches cost healthcare organizations an average of $1 million per year and the overall healthcare industry $6 billion per year. Lack of staff and preparation (policies and processes) are blamed for most data breaches. (Source: Ponemon Institute: Benchmark Study on Patient Privacy and Data Security, Nov. 2010).

Enforcements are going up as mentioned here: ( http://www.egestalt.com/blog/2010/12/08/7-facilities-in-california-fined-for-privacy-breaches ) and here: ( http://www.egestalt.com/blog/2010/07/14/ag%E2%80%99s-office-scores-settlement-for-unparalleled-security-breach-first-of-its-kind ).

Comprehensive support for HIPAA & HITECH regulations offers peace of mind for small medical practices. Features include:

* Comprehensive support for HIPAA & HITECH applicable to small businesses
* Covers both Privacy and Security rules
* A finished document that can be used to show compliancy to other organizations and auditors
* Menu-driven assessment to understand and gain control over HIPAA/HITECH requirements
* Library of free policies and example templates that can be customized to attach as evidence
* Central repository for all HIPAA related documentation
* Automatic updates on new or revised policies, procedures, or forms that reflect changes in the standards
* Automatic updates to changes in regulatory requirements
* Quarterly reminder assessments to help stay on track
* Tracking and managing of Business Associates (BA’s)
* Simple plug-in for PCI-DSS compliance

“As a firm we had a policy of preparing non-disclosure agreements for all our clients,” says Steve Chait, CPA/ABV/CFF, President of Chait & Associates, a full service accounting firm in Hackensack, NJ. “We thought this would cover us for HIPAA compliance as well, however we realized that with the new changes in HITECH, we needed to have a specific Business Associate Agreement in place with all of our medical clients and to show them that we are in fact HIPAA/HITECH compliant as well.”

“We did some research online and found most programs to help get us complaint were in excess of $10,000 and we were considering this when we discovered SecureGRC SB,” added Chait. “This was a $500 entry-point online service that was easy to use and provided us with an excellent tool to help us identify what we needed to do to become compliant. Once we completed their assessment, we received an easy-to-grasp report that we can use to demonstrate that we are now HIPAA and HITECH compliant.”

Availability:
SecureGRC SB is available immediately through direct and indirect channels worldwide. For further details please call (408) 689-2586 or email sales@egestalt.com.

About eGestalt Technologies Inc.:
eGestalt Technologies Inc. ( http://www.egestalt.com ) is a world-class, innovation driven, leading provider of cloud-computing based enterprise solutions for information security and IT-GRC management. eGestalt is headquartered in Santa Clara, California, and has offices in US, Asia-Pacific and Middle East. The Consulting and development team of eGestalt Technologies in India was founded in 2007 by former Intel and IBM executives. eGestalt was nominated Breakthrough Technology Vendor at XChange Americas, August, 2010, and selected by SiliconIndia among the “Top 10 Security Companies to Watch.” Its SecureGRC application was voted runner-up in the Managed Services Category at Xchange Tech Innovators, Nov. 2010.

All trademarks contained within this press release are the sole property of their respective owners and are hereby acknowledged.

Press & Media Contact:
Victor Cruz
MediaPR.net Inc
Santa Clara, CA
(401) 349-3369
vcruz@mediapr.net
http://www.egestalt.com