Automated Compliance Reporting

Download PDF
of Article
Since 2001, BAI associate RLPC has provided
seminars and consulting services to help financial institutions meet the
requirements of the Gramm Leach Bliley Act (GLBA)
and the Health Insurance Portability and Accessibility Act (HIPAA).
On November 1, RLPC is formally releasing a new online software package that
will dramatically simplify and improve the risk assessment process required by
both GLBA and HIPAA.
The new “Turbo-Tax™” style program is
labeled Automated Compliance Reporting II (ACR
II or “acer-too”). This program reduces the risk assessment protocols
published by the National Institute of Standards and Technology (NIST)
to a simple questionnaire. The NIST standards are recommended for use in the
latest advisories by both the Centers for Medicare and Medicaid Services (CMS)
and the Federal Financial Institutions Examination Council (FFIEC).
A unique feature of the ACRII is the easy
integration of Anti-Virus (AV) and Intrusion Detection System (IDS) data to
allow automatic updating of the risk assessment. AV and IDS data may be
securely uploaded on demand to the ACR website to revise the risk assessment
calculations and update the risk assessment report. This makes ACR II the first
true automated compliance reporting system. Changes
in the safeguards inventory (NIST
800-53) may be made at the same time that dynamic AV and IDS data is
updated. The newly updated risk assessment will be returned via email as an
encrypted PDF file. A sample risk assessment is available directly from
ACR.
Companies that are in need of a complete
Information Security Policies and Procedures Manual will find that ACR II is
fully compatible with the Secur-Trak™ family of Manual creation software.
Values from ACR II can be directly inserted into Secur-Trak™ to create a
complete Information Security compliance solution. More information on
Secur-Trak™ is available from their website at
www.glbacompliance.com.
Prior to November 1, pre-release ACR II
packages are available for $75, with updates available for $25 each. Following
November 1, ACR II will be available for $150 for a one year license, with
updates priced at $50 each or a full year of weekly on-demand updates for $150.
An order form is available
here. For more information email support@acr2.org or call toll free
1-866-667-6011.
|