HELP FILE

HIPAA Section D – Audit Controls § 164.312(b)

    (Required)

    Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.

    Access and Management: Pro, Central

    • Connection and remote session activity is logged on the host computer to ensure security and maintain quality control.
      Tip: To view information on session activity, open the LogMeIn Control Panel and follow this path: Options > Connection and Event Details.
    • Access the Windows Event log or Mac console log to get up-to-the-minute data, including user names and the client computer’s IP address, on logon/logout and remote control events.
    • On the host computer’s hard disk, a detailed log is kept of the remote access product’s activities. To protect these files from tampering, the administrator can also specify a different log file location.
      Tip: Open the LogMeIn Control Panel and follow this path: Options > Preferences > Advanced > Event Logs > Location of event logs.
    • Configure and log on to a Syslog server, which allows you to view events from multiple locations. Requires Central; Windows hosts only.
    • GoTo recommends using a relational database to centrally collect log information. Log destinations can be as simple as a Microsoft Access database or as sophisticated as an Oracle server.
    • Administrators can also restrict access to host computers to ensure that data can only be queried or modified by qualified administrators.
    • Automatically create .avi file video recordings of every remote control session. These recordings enable the user to see the recorded sessions exactly as seen by the remote user. Recordings can be saved to a network location. Windows hosts only.
      Note: Open the LogMeIn Control Panel and follow this path: Options > Preferences > Advanced > Screen Recording.
      • store additional audit information when files or folders are made available via a public link. Otherwise, you can rely on account access logs.
      • You can set up an object audit for your registry to create an audit trail of clients linking to their computers.
      • GoTo recommends using a relational database to centrally collect log information. Log destinations can be as simple as a Microsoft Access database or as sophisticated as an Oracle server.

    Support and Collaboration: Rescue

    • Automatically create .avi file video recordings of every remote control session. These recordings enable the user to see the recorded sessions exactly as seen by the remote user. Recordings can be saved to a network location.
      Tip: Open the Administration Center, select a group, and follow this path: Settings tab > Screen recording.
    • Remote sessions are logged to ensure security and maintain quality control.
      Tip: Open the Administration Center and follow this path: Reports tab > Report Area: [various].