Tag Archives: TLS

HIPAA INFORMATION AND EMAIL – HOW TO COMPLY

HIPAA INFORMATION AND EMAIL by Tod Ferran, CISSP, QSA According to HHS, “the Security Rule does not expressly prohibit the use of email for sending e-PHI. However, the standards for access control, integrity and transmission security require covered entities to implement policies and procedures to restrict access to, protect the integrity of, and guard against […]

PCI DSS v3.1 Coming – SSL No Longer Considered Strong Cryptography

SSL No Longer Considered Strong Cryptography Author: Viviana Wesley, PCI QSA. In a recent bulletin the Payment Card Industry Security Standards Council (PCI SSC) stated that updates will be forthcoming to the Data Security Standard (DSS) version 3.0 – and very soon.  The change is related to vulnerabilities seen with Secure Socket Layer cryptography.