 Storage Engine compliance solutions enable the use of existing disks as write-once-read-many (WORM) storage to fulfill the growing demand for records retention and regulatory compliance network. 
Key Benefits
- Auditable
- All access to WORM file/directories is logged
- Secure
- Any attempt to tamper with data will be detected
- Supports variable user-defined retention policies for different data sets
- Robust
- Remote Replication option provides disaster protection
- ZeroImpact Backup option enables high-speed backup of protected data
- Cost Effective
- Enables use of existing storage for WORM volumes
- Offers an alternative to expensive optical storage and specialized disk arrays
With the proliferation of regulations governing the retention of data, enterprises are challenged to find an efficient way to comply with requirements that files be stored for long periods of time and remain unchanged to protect data integrity. Such regulations include HIPAA, Sarbanes-Oxley, SEC 17a-3, SEC 17a-4, FDA 21CFR Part 11, DOD 5015.2, etc.
Financial services, healthcare, biotech, and government agencies are currently under pressure of these industry-specific regulations. However, all public corporations are becoming compelled to preserve increasing amounts of data, including information relating to financial statement accounting.
Simple, cost-effective compliance with Storage Engine WORMLock
To relieve the burden of compliance, Storage Engine WORMLock provides a simple and cost effective means to meet these regulations. Software-based WORMLock allows data archiving and retrieval based on a write-once-read-many (WORM) paradigm using your existing storage, offering an alternative to cumbersome, expensive optical storage and costly, proprietary specialized disk arrays.
WORMLock accomplishes this without impacting existing applications by attaching a hidden digital signature to uniquely identify each directory and file and protect them against content alteration. Once a volume is established as a WORMLock volume, it cannot be changed, even by the administrator.
WORMLock offers authentication, access controls, and permissions, as well as audit logs to detect and track any attempts to access and/or tamper with a locked file or directory. For added convenience, policies can be set to automatically unlock volumes at the end of the required retention periods.
Learn more about WORMLock (link to PDF)
Current Compliance Regulations:
Government -- DOD 5015.2
- A fixed period from the time records in the series or the system is created. Normally, a fixed period following their regular cutoff dates. For example, the phrase "destroy after 2 years" provides continuing authority to destroy records in a given series 2 years after their creation (normally 2 years after their regular cutoff date).
Healthcare -- HIPAA
- Hospitals and other health care providers must maintain medical records as well as billing records on Medicare (Title XVIII), Medicaid (Title XIX), and Maternal and Child Health (Title V) for at least 6 years.
- Records must also be retained for 2 years after a patient's death under HIPAA.
- Medicare Conditions of Participation, section 42 CFR 482.24 (b), states that all hospitals must retain medical records in their original or legally reproduced form for a period of 5 years.
Life Science -- FDA 21CFR Part 11
- Requires preservation of electronic signatures that are intended to be the equivalent of handwritten signatures, initials, and other general signings required by predicate rules. Part 11 signatures include electronic signatures that are used, for example, to document the fact that certain events or actions occurred in accordance with the predicate rule (e.g. approved, reviewed, and verified).
Brokers -- SEC Rule 17a-4
- Every member, broker and dealer subject to Rule 17a-3 shall preserve for a period of not less than 6 years, the first 2 years in an easily accessible place, all records required to be made pursuant to Rule 17a-3(a) (1), (2), (3), and (5).
|
|
Business Solutions For...
|