SECURING FIBRE CHANNEL FABRICS - Brocade

Gramm-Leach-Bliley Act (GLBA)vides specific penalties, both civil and criminal, to enforce HIPAA rules.This has resulted in a spike in health-related organizations adoptingencryption solutions to comply with HIPAA.HIPAA and StorageWhen healthcare transactions flow over open networks, as wouldbe the case if replicating data to a secondary data center usingFCIP, they must be protected by some technical safeguard such asencryption.The guidelines are not always clear but there is a reference to:“Implement a mechanism to encrypt EPHI whenever deemedappropriate.”Gramm-Leach-Bliley Act (GLBA)The Gramm-Leach-Bliley Act (GLBA) was enacted by the US Congresson November 12, 1999, to open up competition among banks, securitiescompanies, and insurance companies. The Financial Privacy Rulegoverns the collection and disclosure of customers' personal financialinformation by financial institutions. The Safeguards Rule requires allfinancial institutions to design, implement, and maintain safeguards toprotect customer information.US financial institutions (including credit reporting agencies) arerequired to comply with GLBA. It is enforced by the Federal Trade Commission(FTC) and other government agencies.Some of the penalties under GLBA include:• “the financial institution shall be subject to a civil penalty of notmore than $100,000 for each such violation”• “the officers and directors of the financial institution shall be subjectto, and shall be personally liable for, a civil penalty of not morethan $10,000 for each such violation”The key term is here is “personally liable”, which certainly gets theattention of the officers and directors of a financial institution. This lawis enforced and has lots of bite to it, with several cases tried and currentlyon trial under this act.Securing Fibre Channel Fabrics 161