KRAA Security provides a comprehensive suite of Security Consulting, Managed Security Services and Products that are practical, efficient and cost effective. KRAA Security protects organizations from threats through a combination of preventative services in:

Application Security Network Security

Operating System Security Compliance Measures

Our Managed Security Services provides consistent and reliable security management to our clients for a low initial investment, and a manageable recurring monthly maintenance fee. Clients using ourManaged Security Services will benefit from economies of scale, reduced overhead and fixed costs, and 24/7 support. Our management capabilities covers areas such as:
Intrusion Detection/Prevention Firewall Management
Managed VPN Service Content Filtering
Website monitoring Virus scanning
Spam filtering Vulnerability Scanning
Phishing and Pharming Defense Host Intrusion detection

Massachusetts Privacy Law 201 CMR 17.00 Compliance Service

KRAA Security will help you comply with the standard to insure that your business meets the requirements. Our process will help you do the following:

Conduct a risk assessment if the company has not already done so

Create an Written Information Security Policy to meet requirements
Perform a gap analysis or vulnerability analysis to understand your current environment
Determine weaknesses in your polices and processes
Make recommendations and develop a remediation plan for closing the gaps to meet the requirements
Assist you if necessary in deploying controls in the processes or technologies needed to be deployed
Develop and documentation or policies needed to support ongoing compliance requirements

LATEST BREACH

Organization: John Muir Health

Date: 4/5/2010
Record Count? 5,450
What happened? The Walnut Creek-based hospital system has begun notifying 5,450 patients by mail of a “potential breach of their personal and health information.” The theft two months ago of two laptop computers at the John Muir Physician Network Perinatal office in Walnut Creek, officials said April 5. “The laptops were password protected and contained data in a format that would not be readily accessible. While we have no evidence that the information has been accessed or used inappropriately, we cannot rule out that possibility, and, therefore, are notifying patients to help protect their identity,” said Hala Helm, Muir’s vice president and chief compliance and privacy officer

What was the response? Letters were sent to affected individuals and authorities are investigating.
Source: San Francisco Business Times