Someone at Microsoft got a phone call about whether or not Microsoft Small Business Server 2003 is HIPAA compliant because it has two network cards.

So today I get asked if there is anything in HIPAA….

So I’m on the phone today and get asked if there is anything in HIPAA that says that ISA server/SBS 2003 is not HIPAA compliant because it has two Network cards.

The final answer to the question was:

Where’s your weak spots? That’s where you need to be focusing your time and budget on.

Counting network cards is not the way to more security.

Amen, sister. :)