Children's Hospital Protects 
Protected Health Information with Managed Data Loss Prevention 

The Business Challenge 

A children’s healthcare network of hospitals needed a data loss prevention (DLP) solution to protect over 7,000 endpoints across 16 of their hospital locations. All facilities in the system had a requirement to stay compliant with HIPAA by safeguarding their substantial protected health information (PHI). The hospital system’s Corporate Privacy and Information Security Officer was also concerned about the organization’s own intellectual property, and the potential damage of a data leak, or access by unauthorized users.

Critical Success Factors

The hospital’s security team wanted a cybersecurity ally who could offer a managed service to triage incidents and work in partnership with the hospital to develop and implement policies specific to their environment. “We’re a very small compliance and privacy team, and we really needed a partner that was reliable and consistent in their ability to support us,” their Information Security Officer said of the selection process.

“We used industry analyst reports such as Gartner to assist us in identifying the best vendor options, and those who could provide us with the best possible solution to meet our needs,” she added. “After an RFP process, we determined Fortra’s Digital Guardian was the best fit for us.”

The Solution

Digital Guardian’s Managed Service Program (MSP) implemented smoothly, with the hospital system’s security team assisting, and Fortra guiding the hospital through policy deployment.

Results

The hospital’s Corporate Privacy and Information Security Officer summarized their results: “The number of incidents since implementing in 2016 has dramatically dropped, and the number of critical incidents is at an all-time low. Our employees respect that we are monitoring our network and systems and are adhering to our policies. Digital Guardian has significantly improved our security/privacy posture.There’s a learning curve, and over time we changed our policies to reflect the use of new technologies.”