医疗风险和漏洞管理

评估医疗保健机构在防止数据威胁和数据遭窃方面的完善性

后续步骤:

概述

迈克菲风险和漏洞管理解决方案可以让您更快地完成保护医疗保健机构所需要的策略评估、漏洞管理、补救和报告工作。我们的合规和安全专业知识以及高效技术可以帮助您识别和减轻与外部和内部威胁、数据失窃以及您漏洞管理程序中的缺陷相关的风险。这一诊断流程能让您了解哪里的数据需要立即采取措施,同时全面显示您组织的风险机率和安全保护范围。借助代理、无代理和计划选项,迈克菲可以降低在评估和减轻 IT 风险方面的难度、复杂性和费用,同时,您还可以即时了解整个基础设施(包括含有敏感信息的数据库)的状态。

主要优势

  • 使用集中的安全管理平台提高效率
    借助 McAfee ePolicy Orchestrator (ePO) 平台这款可简化管理并能实现维护自动化的集中安全控制台,您可以跨所有系统和站点设置策略、执行审核、实施控制、修复漏洞和报告合规性,为您省时省钱。
  • 通过对国际框架和标准的支持,加强您的安全保护
    借助产品对严格且广受认可的国际框架(如 ISO 17799/27002 和 COBIT)的支持以及对基于标准的策略内容(如 XCCDF 和 OVAL)的集成支持,采用更广泛、更正式的风险防护方法。此外,通过使用 McAfee Database Activity Monitoring 强化您的合规工作成果。
  • 将数据收集、监控、管理和报告统一起来
    简化对当前违规行为的收集和报告流程,记录为降低有意违规处罚量而作出的改进。在一个共用管理控制台上查看事件和活动信息,并将数据整合到供管理员、审计员和高管查看的重要报告中。
  • 不管您的主机和网络带或不带代理,均可以对其进行评估
    发现整个组织中的漏洞和违反策略的行为,避免出现令人头疼的防火墙和证书问题。迈克菲支持各种不同的平台和设备,所以您不必为选择代理还是非代理技术发愁。

产品

数据库安全

McAfee Database Activity Monitoring
McAfee Database Activity Monitoring

McAfee Database Activity Monitoring 能够实时拦截攻击,提供详尽的审核报告以帮助您满足合规要求,并可以采用虚拟补丁技术简化漏洞修复。

风险与合规性

McAfee Configuration Control
McAfee Configuration Control

确保持续合规。McAfee Configuration Control 能够避免对关键服务器的未授权变更,加强对环境的监控,并简化内外部 IT 审核流程。

McAfee Policy Auditor
McAfee Policy Auditor

McAfee Integrity Control 可以实现数据采集和评估流程的自动化,这对于内外部系统级 IT 审核工作来说是一项极大的便利。

McAfee Risk Advisor
McAfee Risk Advisor

McAfee Risk Advisor 能够通过前瞻地关联威胁、漏洞和防范措施信息以确定存在风险的资产并优化补丁安装,为您节省大量时间和成本。

McAfee Vulnerability Manager
McAfee Vulnerability Manager

McAfee Vulnerability Manager 可以发现网络中的漏洞和违反策略行为,并排定优先级。通过权衡资产关键性和漏洞严重程度,让您可以重点保护最重要的资产。

McAfee Vulnerability Manager for Databases
McAfee Vulnerability Manager for Databases

McAfee Vulnerability Manager for Databases 可以评估所有已知威胁的风险,通过不同的优先级别明确区分威胁程度,并提供修补脚本和建议。

服务

事件管理检查

制定更全面、更有效的事件应急响应和管理计划。McAfee Foundstone 将对您事件管理计划中的差距 进行分析,并提供用于提升突发事件应急响应方案的建议。

数据丢失防护评估

检测并防止敏感信息的未授权传输或泄露。 McAfee Foundstone 通过识别被复制的敏感数据或当前正在从其原始预期存储区域传输的敏感数据,来降低您的风险率。

法规和合规性检查

遵循信息安全合规性要求。 McAfee Foundstone 对您企业的法规和合规性状态中的差距进行评估,并给出下一步建议。

漏洞管理检查

评估您的漏洞管理计划。 McAfee Foundstone 对您的计划进行差距分析,以确保计划中的人、流程和技术三方面维持一个完美平衡。

资源

宣传册

Security Connected for Healthcare Providers: Preventative Care, Proactive Response (English)

Learn how the Security Connected framework from McAfee works within the resource constraints and the special business requirements of healthcare providers to deliver threat protection, operational efficiencies, and sustainable compliance.

播客

解决方案简介

白皮书

社区

论坛

未找到结果

博客

  • Emerging Trends in Healthcare Security: Join @McAfeeBusiness For #SecChat Thursday 2/23
    Brian Contos - 二月 16, 2012
    Healthcare demands a degree of confidentiality and privacy that exceeds almost any other industry. As a result, trends such as cloud computing and the consumerization of IT have unique implications for security professionals working in this sphere. With increased integration of electronic records, as well as evolving regulatory pressures and privacy laws, the complexity of Read more...
  • The Dark Side of Collaboration
    Steven Fox - 十月 05, 2011
    Collaboration can be toxic to an Information Security program.  Assaulted by conflicting management agendas and priorities, the consensus needed for success sometimes suffers an early death.  However, many organizations perpetuate the mantra that collaboration is always a good idea.  Unfortunately, managers’ collective memories tend to cling to the outcomes of successful collaboration at the cost Read more...
  • Delivering Better Healthcare through Data Protection
    Archive - 十一月 24, 2010
    Recently, we delivered a great webcast discussing how data protection can help deliver better healthcare. It may sound like a stretch, but data protection can really improve healthcare delivery. If you think about it, U.S. healthcare is unique in that they are subject to state (data breach notification), federal (HIPAA-HITECH), and international (PCI-DSS) regulations, all Read more...
  • First #SecChat Raises Questions on Securing PHI
    Brian Contos - 十一月 23, 2010
    Last week we kicked off the first ever #SecChat, a hashtag chat on Twitter that some have likened to a ‘flash mob.’ It was pretty cool to witness. For about an hour, roughly 66 security practitioners and evangelists were actively engaged in conversations via Twitter about information security and Personal Health Information (PHI). Many more, Read more...
  • #SecChat is Born! Join us for the inaugural Twitter chat
    Brian Contos - 十一月 17, 2010
    The security community is a very vocal and interactive bunch (if you haven’t figured that out already). We’re not afraid to share our ideas and opinions or to pass along best practices when it comes to the issues that impact information security and our jobs. And there is a constant stream of hot topics that Read more...