Cross Industry Cross Compliance - Governance, Risk, and Compliance Topic for Oracle Applications - page 327

Further, the health care transactions are as follows:
• Health claims or equivalent encounter information.
• Health claims attachments.
• Enrollment and disenrollment in a health plan.
• Eligibility for a health plan.
• Health care payment and remittance advice.
• Health plan premium payments.
• First report of injury.
• Health claim status.
• Referral certiication and authorization.
Oracle's products and HIPPA
From the preceding information you can see that the information that needs
protection is concentrated in the benefits and payroll modules of E-Business
Suite. That having been said, it will be quite pervasive.
Scrambling and data masking
One needed technology to ensure that the information is not available to developers
is masking , or the practice of safe cloning .
Many copies of production environments are created, also known as cloning, for
various purposes. These copies are typically used for performance tests by DBAs or
developers or to test upgrade/patching of the production database. Cloning of the
production environment to the test area introduces several risks to an organization.
Oracle provides a rapid clone utility to clone Oracle applications environment.
Following are some of the key steps that need to be considered:
• Change all the passwords in the cloned environment
• Scramble sensitive and critical data including social security number, credit
card information, salary, and so on
• Update DB links information in the cloned environment to point to the
corresponding development environment
The OEM Data Masking is a part of Database Management Pack, whereas OEM
Data Scrambling is a part of Application Management Pack for EBS.