Using SpiceWorks in a health system environment.

selorex · 2015-02-26T21:48:31.000Z

Hello everyone, I’m currently a Bio-Medical Technician for a hospital and was wondering if you or anyone you know is using anything SpiceWorks related in the work force? If so, how well has it worked out for you and your users; and are there precautions you took in following the guidelines of HIPAA? Thanks!

aaronelmitt2 · 2015-02-26T22:06:37.000Z

We are currently using it and we work out of a critical access hospital in KS. We use it to monitor and audit our network for the hospital and as far as we know it is HIPAA compliant.

aaronelmitt2 · 2015-02-26T22:07:33.000Z

or at least no one can tell us that it is for sure NOT HIPAA compliant!

selorex · 2015-02-27T06:08:37.000Z

Thank you, I can’t wait to get started! I know as a contractor for a school In south Texas, we used it without any trouble and loved it!

johnnelson3 · 2015-02-27T14:05:12.000Z

Compliance is not a checklist and no product, like Spiceworks, can be said to be compliant or not in a blanket statement like that. HIPAA compliance is all about assessing and managing risk. WRT Spiceworks, you must assess what risks using it adds (or mitigates), document that assessment, then act accordingly.

FWIW, we use Spiceworks in our enterprise. It provides several useful features in pursuit of compliance. It doesn’t store ePHI, so that knocks a lot of concerns right off the list. It does, however, contain a fair amount of detail about our networks and systems, detail which could conceivably be used in an attack scenario. Like other systems that contain sensitive information of that nature, we take care to wrap an appropriate level security and monitoring around that resource.

kindofageek · 2015-02-27T14:51:43.000Z

Spiceworks doesn’t store PHI/ePHI (unless your employees put it in tickets) so I don’t think you have many worries about HIPAA. We use it here and I feel very comfortable with it. Protect Spiceworks just like you would your documents containing confidential information and you should be ok.

brianmedwork · 2015-03-05T13:30:41.000Z

It has been a God send to our Health Care environment. The inventory management, and help desk are great tools. The reporting makes me look like a hero to the Board when they ask me to prepare metrics for a meeting in 45 minutes.

selorex · 2015-03-05T14:54:56.000Z

Awesome, that’s great news! I appreciate all the replies and everything, I’m eager to set it all up and get it out to our users. It’ll help us a ton! Thanks everyone.