System
- All software necessary to run the WA Health Inc. applications.
- All technical services to maintain the hosted environment.
- Nightly offsite backups to a secure facility.
- Multi-layer application security and access controls.
- Persistent system security and performance monitoring.
- 24 x 7 access with emergency after-hours support with a 99% uptime guarantee.
- Maximum recovery time of 72 hours in the event of a disaster.
- Strict adherence to Policies and Procedures in place to assure the security and reliability of the environment.
Security Features:
WA Health Inc has the following policies and procedures in place to assure the security and reliability of the environment:
Access Control
- Physical Access to WA Health Inc Offices
- System Access Control
for WA Health Users - System Access Control for Customer Users
- Vendor Access Control
- Authentication/Password
Policy - Roles and Responsibility
Availability
- Backup Policy and Procedures
- Change Control Policy and Procedures
- Disaster Recovery Policy and Procedures
- Downtime Reporting Policy
Confidentiality
- Data Destruction Policy and Procedures
-
Securely Working with PHI/PII Data
-
Customer Setup
-
Privacy and Security Policy
-
Security and Privacy
Awarness Training
Miscellaneous
- Policy Update and Review
Process -
Employee Role Change
and Termination Procedures -
Security Officer Roles and
Responsibilities -
Incidence Response Plan
Procedures
WA Health Inc. has policies and procedures in place to help ensure employer training and awareness.
Risk Assessment Process
WA Health Inc. has policies and procedures in place to help ensure that employees understand their individual roles and responsibilities concerning processing and controls to ensure significant events are communicated in a timely manner. These include formal and informal training programs and the use of email to communicate time-sensitive information and processes for security and system availability purposes that notify key personnel in the event of problems.
A.I
The integration of these layers comes in the form of the service-oriented technologies that are used to make the application and data services available to users of the software. This comes in two primary forms:
Web Services
The employer portal, as an example, is a web application that integrates with the services provided by the application and data layers. The web application architecture uses a message broker pattern to integrate with the core benefits administration system, but also provides the capability to integrate with other systems using a plugin-based design.
Desktop Services
The primary user interface through which operators’ access and process member information, integrates with the application and data layers using a rich set of domain or business- oriented services to deliver a desktop-based user experience for benefits administration, business operations and workflow.
Monitoring Activitie
All WA Health Inc servers and associated infrastructure in the hosting environment are continuously monitored. The Technical Services team employs several overlapping enterprise monitoring tools, both centralized and decentralized, for redundancy. These tools provide 24 x 7 automated notification and paging including the following categories:
• Host-based security monitoring.
• Predictive and reactive system failure detection.
• Service and protocol probing and paging.
• Database and application warning and error notification.
Back-ups
WA Health Inc. utilizes an industry leading backup solution to assure the availability of customer data. The backup agent, running on WA Health Inc’s server, performs the encryption on backup data prior to transmission across the network. In this way, backup data is encrypted prior to leaving the host and remains encrypted in-transit and at rest. The backup encryption keys are stored per backup job and are retained by WA Health Inc Technical Services personnel.
Information & Communication Systems
WA Health Inc has established an organizational structure and has set a tone to help facilitate the communication of important business information. Scheduled meetings are periodically conducted at the organization. Management holds regular meetings covering issues involving operations, staffing and sales. WA Health Inc’s communication channels are open and relaxed, and employees are encouraged to share information that might enhance business operations.