-----Original Message-----
From: Anything But Microsoft [mailto:abm@xxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, June 29, 2004 9:43 PM
To: <@securityfocus.com BUGTRAQ
Cc: secure@xxxxxxxxxxxxx
Subject: Microsoft technologies. By default, non-HIPAA compliant?
The US health care system is the only industry where best network and
security practices are a federally mandated requirement.
Um, no. I work in the banking industry and we are federally regulated and
audited for security. I've never worked in the medical industry but I'd be
surprised if their requirements are more stringent than ours.