Re: IDS (Intrusion Detection Systems)

[Michael Johnson]

IDS is but part of the balanced security approach needed.   Do you have a general security policy? If so, there should be other elements like vulnerability assessments, remediation plans, business recovery...   Might be best to look at NIST 800 for more on this. ----- Original Message ----- From: Baldassinlight, Donna To: WEDI SNIP Security Workgroup List Sent: Tuesday, September 09, 2003 2:31 PM Subject: IDS (Intrusion Detection Systems) Does anyone know whether  health care providers are using or considering the use of IDS (Intrusion Detection Systems) to comply with the security regulations under HIPAA. We understand that there are about six firms that provide this type of service. Does anyone know of any healthcare organizations that have purchased or are considering this? Is it cost effective considering the level of risk for a 700 bed hospital or a 300 bed nursing home? Thanks, Donna --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services. They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-security as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org --- The WEDI SNIP listserv to which you are subscribed is not moderated. The discussions on this listserv therefore represent the views of the individual participants, and do not necessarily represent the views of the WEDI Board of Directors nor WEDI SNIP. If you wish to receive an official opinion, post your question to the WEDI SNIP Issues Database at http://snip.wedi.org/tracking/. These listservs should not be used for commercial marketing purposes or discussion of specific vendor products and services. They also are not intended to be used as a forum for personal disagreements or unprofessional communication at any time. You are currently subscribed to wedi-security as: [EMAIL PROTECTED] To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the address subscribed to the list, please use the Subscribe/Unsubscribe form at http://subscribe.wedi.org