Governance, Risk & Compliance

Governance, Risk Management, Compliance

Secure File Transfer to Reduce Risk and Demonstrate Compliance

Ensuring the secure transfer of confidential, sensitive information is an essential element of enterprise IT Governance, risk management and compliance programs. Regulations, such as the Health Insurance Portability and Accountability Act (HIPAA), the Food and Drug Administration (FDA) 21 CFR Part 11 and Sarbanes-Oxley (SOX), place significant requirements on companies regarding data transfer.

  • HIPAA requires that companies prove that only the intended information was shared or exchanged.
  • The FDA requires that administrative controls are in place when electronic systems and records are used in place of paper or manual systems.
  • Sarbanes-Oxley requires that business processes are auditable.

All organizations should have compliance concerns with FTP and SFTP usage in the enterprise since FTP does not maintain a record of all transactions which is a fundamental compliance requirement.

File Transfer Compliance

Accellion provides its customers with the security and tracking and reporting tools necessary to demonstrate compliance. The Accellion managed file transfer solution is FIPS 140-2 Level 2 certified providing the necessary security and encryption technologies to meet HIPAA 2.0 and HITECH requirements.