This means that – other than under the free plan – LastPass customers can store and sync an unlimited number of passwords and other credentials across an unlimited number of devices regardless of the operating system, browser, or device type. LastPass is a vault-based password manager. A Brief Introduction to Vault-Based Password Managers Nonetheless, there are many password managers capable of satisfying these requirements that can also help organizations develop a culture of online security which can be beneficial to every element of a Covered Entity´s or Business Associate´s operations. The first (45 CFR 164.308(a)(5)(d)) requires Covered Entities and Business Associates to implement procedures for creating, changing, and safeguarding passwords while the second (45 CFR 164.312 (a), (b), and (d)) relates to access controls, audit controls, and verification controls.īecause HIPAA is technology-neutral, these provisions do not require the implementation of a password manager. There are two areas of the Security Rule that are particularly relevant to password managers. We especially look to see whether the LastPass password manager is a suitable tool to support compliance with the password management requirements of the Administrative and Technical Safeguards. Our LastPass review looks at this vault-based password manager from the perspective of an organization subject to the HIPAA Security Rule.
0 kommentar(er)
