About Alvaka-Admin

This author has not yet filled in any details.
So far Alvaka-Admin has created 663 blog entries.

1.7 Million Patient Records In Massive Data Heist At NYC Hospitals

All I can say is “WOW!” I wonder how much this is going to cost the hospitals. How much damage is done to their reputation? What kind of government settlement, oversight and years of scrutiny will this cost the hospitals when the regulatory agencies are done negotiating with them on penalties and remediation?

Here is the gist of the story:

Thieves made off with the personal health records of an estimated 1.7 million New Yorkers' when they stole backup tapes from four Bronx hospitals In December. According to statement issued by the 14-hospital system on Feb. 11, computer backup tapes were stolen containg the records. The report came just days after the New York City Health and Hospitals Corporation began notifying victims Feb. 9. While it took HHC nearly two months before reporting the data breach, it was well within the 60-day period required by New York state law.

2019-04-09T00:25:53-07:00February 25th, 2011|

What Are Your RTO And RPO?

I just had a meeting with one of Alvaka's IT consultants regarding the development of a disaster recovery and business continuity plan for a financial services client of hers. A year ago the client had a very nearly disastrous weather related IT event that could have slammed the whole company beyond imagination. During a heavy downpour a major leak opened up on the roof and dumped significant amounts of water right onto the client’s primary server rack. The servers were so flooded that during the recovery process the techs actually had to de-rack the servers and tilt them over in order to pour out the water. Full disaster was averted when

2018-05-07T08:51:30-07:00February 12th, 2011|

Warning – Know Thy Back-Up

Know what you are backing up and know what you need to back-up.
They are not always the same thing.

During the course of writing this series of blogs on backup and disaster recovery I thought I would throw in a few anecdotal stories along the way. I just got out of a meeting with one of my key managers. We were talking about a long time client and a huge backup problem that was just uncovered.

2011-01-28T01:54:00-08:00January 28th, 2011|

Why The Interest In The VCIO?

We are winding down 2010. As I look back at the recent months to assess the trends for 2011, one thing stands out most prominently. That one thing is the VCIO or the Virtual Chief Information Officer. While I don’t particularly like that term, it is perhaps the most intuitive description for someone who serves in a part-time contract role as the CIO for small to mid-size businesses.

From my vantage point, I see three primary drivers behind the increased demand for IT experts serving in the role. Those three drivers are...

2020-04-08T23:29:02-07:00December 24th, 2010|

Business Continuity Planning Made Easy

I am flying back from a small, private and exclusive invitation-only conference in Chicago. This conference is only open to industry's most esteemed and established IT service providers. The private technology briefings, at this semi-annual event, provide the best updates on cool new stuff that solves real business problems.

2020-01-06T20:32:02-08:00November 22nd, 2010|

Is 24×7 IT Availability Really Required?

This is a question posed to me by, Aaron Goldberg of Ziff Davis Publishing and Eric Lundquist of Ziff Davis Publishing, during an IBM sponsored webinar this morning.

The fundamental questions focused around two areas, starting with, "Do Information Technology (IT) shops need to staff and prep for 24x7 operations?" In a polling question, 81% said, “Yes” they do need to do that. The subsequent discussion revolved around what options IT shops have to do that since they normally don’t have the budget, nor the human resources, required to do server monitoring and application monitoring combined with after hours staffing and remediation of issues. One solution to avoid building your own, was to contract with a firm that can provide augmented support 16x5 or 1

2020-04-08T23:29:49-07:00November 12th, 2010|

Are You An IT Hostage?

If you are a business owner, CEO, CFO or otherwise ultimately responsible for Information Technology (IT) in your organization, here are a few questions that you may have asked yourself at some point. If my IT staff or service provider were to suddenly fall off the map or just not show up, for whatever reason, would my company be left in a ditch?

 
2020-04-08T23:30:33-07:00November 11th, 2010|

HIPAA And Business Associate Challenges

I wrote a short blog on some of the changes that were instituted by the passage of ARRA and it incorporated HITECH provisions. If you follow the link at the bottom of this entry, you can go to an interview that I did with Search Security on the subject of VARs and Business Associates. "In this edition of “Patrolling the Channel,” see why the designation of “business associate” has given McDonald additional compliance challenges. The executive VP talks about the technical and non-technical controls being implemented for HIPAA’s sake.

2020-03-02T20:13:18-08:00October 30th, 2010|

Don’t Confuse Disaster Recovery With Business Continuity

In consulting with so many clients, there are some things that just seem to be universal. One of those nearly universal truths, is the tendency for clients to mix and match or use the terms, Disaster Recovery and Business Continuity interchangeably. While these two terms define activities that often parallel each other, they are in fact very different concepts. The confusion or mixing of the terms can lead to clients being misled, or even left at significant risk, due to improper planning.

2020-04-08T23:31:59-07:00October 26th, 2010|

What They Didn’t Tell You About HITECH

Many were excited by the passing of Title XIII of ARRA, also known as the Health Information Technology for Economic and Clinical Health Act (HITECH Act). It was billed as providing up to $22 billion dollars for taxpayer money to, "advance the use of health information technology." What was not so well trumpeted during all of the excitement, were the massive increases in enforcement, penalties, the changing of the HIPAA enforcement responsibility from CMS to the Office of Civil Right and the extension of the HIPAA Rules to business associates of covered entities.

2020-04-08T23:33:21-07:00October 23rd, 2010|