HIPAA Security RuleFederal regulation
Official source ↗National standards for administrative, physical, and technical safeguards protecting electronic protected health information.
Explore Apollo's HIPAA page →Secure defaults need healthcare context.
Apollo provides supported virtual machines for healthcare teams evaluating how image-level controls behave inside a real cloud workload.
Healthcare references
Guidance Apollo is designed to sit beside.
Use the relevant source to ask better questions of the exact image, the surrounding workload, and the operating program.
NIST SP 800-66 Rev. 2Implementation guidance
Official source ↗NIST's cybersecurity resource guide for implementing the HIPAA Security Rule and relating its requirements to NIST controls.
Explore Apollo's NIST SP 800-66 page →HITECH ActFederal statute
Official source ↗Federal law that strengthened HIPAA privacy and security protections and extended Security Rule obligations to business associates.
Explore Apollo's HITECH page →HHS Healthcare and Public Health CPGsSector performance goals
Official source ↗Voluntary healthcare-specific essential and enhanced goals for prioritizing high-impact cybersecurity practices and resilience.
Explore Apollo's HHS HPH CPGs page →HICP 2023Industry practices
Official source ↗Health Industry Cybersecurity Practices guidance addressing leading health-sector threats through ten mitigating practices.
Explore Apollo's HICP 2023 page →HITRUST CSFAssurance framework
Official source ↗A certifiable, risk-based control framework that harmonizes healthcare-relevant standards and regulatory requirements.
Explore Apollo's HITRUST page →Inside the product
What you receive with an Apollo image.
Secure defaults
Begin with an operating-system or application-stack image configured to reduce avoidable exposure.
Exact-build selection
Choose the operating system, release, stack, and processor architecture that align with the workload you are actually deploying.
Marketplace delivery
Acquire the product through AWS Marketplace and review the listing for the current software release, regions, price, and contractual terms.
Seller support
Use Apollo support for product questions and image-specific issues while retaining ownership of the complete workload and operating program.
Complete workload
The rest of the workload still matters.
Apollo image
The defined operating-system and included software starting point described by the exact product listing.
Cloud platform
AWS account configuration, services, tenancy, region selection, network controls, and the customer-AWS shared-responsibility boundary.
Customer
Identity, data protection, applications, interfaces, monitoring, backups, procedures, evidence, risk decisions, and production operation.
Put the exact build through a real workload rehearsal.
Hardening can affect services, ports, protocols, permissions, authentication, integrations, and performance. Evaluate the selected image outside production, document exceptions, and retain evidence for the resulting configuration.
Find a build to testBring healthcare context to the product decision.
Select an exact image, test it with the complete workload, and confirm every safeguard that remains outside the product.