Case Study - System Access Audit Compliance at The Center to Promote HealthCare Access

Case Study - System Access Audit Compliance at The Center to Promote HealthCare Access

• 1.
  people audit System Access Audit Compliance at The Case Study Center to Promote HealthCare Access The Center to Promote HealthCare Access – a government-sponsored non-profit – is a mission-driven organization that combines software development with process reform, advocacy and a deep commitment to helping underserved people. Industry: Healthcare One-e-App, The Center’s signature product, is an innovative, Founded: 2005 web-based system for connecting families with a range of health, social Headquarters: Sacramento, CA, USA service and other federal and state support programs. Communities Website: www.oneeapp.org can use One-e-App for programs such as Medicaid, S-CHIP, Food Stamps (SNAP), Earned Income Tax Credit, utility assistance, local health insurance expansion programs and more. “Thisservers upfor keeping our is critical and Challenge running, and also to As an innovator in providing state-of-the-art solutions for health answer management’s and social services, The Center is dedicated to providing usability, needs to demonstrate ease of access and responsiveness. And this innovation must come without compromising any aspects of data security or compliance. compliance. Vinay Singh ” IT Operations Manager The One-e-App application platform is deployed and managed on 93 servers and 91 workstations across 3 geographically separated data centers. Thanks to its robust n-tier architecture, One-e-App is built for high performance and data security in all levels of data access. Given the sensitivity of personal heath records data and the internal and government regulations regarding data access compliance, The Center sought to augment its security with an auditing solution that would detail all data and server access, including from internal staff. “Our application architecture is built to meet strict security and up-time requirements, but we still need to document every server access by IT Admins and internal staff developers,” noted Vinay Singh, IT Operations Manager for The Center. “This is critical for keeping our servers up and running, and also to answer management’s needs to demonstrate compliance.”
• 2.
  Case Study people audit System Access Audit Compliance at The Center to Promote HealthCare Access Solution With a focus on meeting their compliance and uptime needs, The Center sought a solution that provides visibility into activity on their servers. After comparing various alternatives, The Center chose ObserveIT, due to its ability to provide real-time exposure. “ObserveIT lets us know what is happening inside our servers at any time,” commented Mr. Singh. “When two developers are both working on a server at the same time, it is hard to tell who changed what. ObserveIT allows us to track exactly what happened.” With One-e-App’s need for performance, ObserveIT’s small server footprint also impacted the deployment decision. In early 2009, a proof of concept was deployed on the One-e-App network. After successful POC completion, Obser- veIT was rolled out in July 2009 to a system-wide deployment on 100 servers. Since the successful rollout, the admin team can now respond immediately to management requests for utilization reports of Terminal Servers. “We can track utilization, which allows peace of mind when a developer is in the server. If anything happens, we can always see what happened.” “ ObserveIT allows us to track exactly what happened. ” Benefits Peace-of-mind from knowing exactly what developers and admins are doing Immediate fulfillment of compliance usage reports Faster response time to system faults [email protected] | www.observeit-sys.com