Benefit Allocation Systems invests strategically in technology to ensure the security of the MyEnroll.com system. In addition to security and privacy training, BAS employs best-practices security technologies to support encryption, file change management, server log analysis, virus protection and data loss prevention.
BAS has implemented a security plan and operational platforms in compliance with federal data privacy and security rules, including, but not limited to, HIPAA privacy and security requirements and National Institute of Standards and Technology (NIST) guidance. BAS undergoes an extensive security audit each year to ensure proper operational controls and data protections. BAS, when acting as a Business Associate, complies with the HIPAA privacy and security rules.
BAS has a full-time, in-house General Counsel who is trained in employee benefits and privacy/security compliance. She keeps up-to-date on legal requirements and advises BAS and MyEnroll.com accordingly. Each employee at BAS takes a mandatory HIPAA privacy and security training upon the start of employment and training is held for all employees on an annual basis. BAS President, IT Department and General Counsel regularly review training based on the evolving responsibilities of the organization. When new items require training, BAS implements that training through either IT communications or formal training sessions.
Security and privacy of BAS operations and the MyEnroll360 system is of the utmost importance to BAS.
