Compliance and Regulatory Information from Different Perspectives

Compliance and Regulatory

Information from Different Perspectives

November 17^th  11:15 – 4:00

Speakers begin at 12:00

Speakers include:

 
Scott Mansolillo        
Vice President, Associate General Counsel
   & Director of Compliance
The Hartford Financial Services Group

Compliance in a Multi-Jurisdictional Environment

Jerry Hughes, CISA, QSA

Director IT Audit & Compliance

Light House IT Compliance

ARRA/HITECH

 Law that was signed into law earlier this year and its’ impact .

 The impacts on the health care industry and business associates of them outlining the heightened privacy and security standards for health information included in the American Recovery and Reinvestment Act (ARRA) — also known as the economic stimulus bill. Under these provisions, more organizations may face civil and criminal penalties for failing to protect personal health records as required by the Health Insurance Portability and Accountability Act (HIPAA). At the same time, the ARRA strengthens HIPAA data security and breach notification requirements.

He will help you make sense of the ARRA ’s health privacy provisions by examining:

• Changes to HIPAA’s privacy and security mandates;
• New HIPAA enforcement provisions, including the potential for individual criminal liability; and
• What types of organizations may now be required to comply with HIPAA

Before ARRA, HIPAA did not directly affect organizations that provided data services to hospitals and other covered entities. Now those organizations can be held accountable for failure to comply with HIPAA’s privacy provisions.

 
Jennifer Morgan DelMonico

 Murtha Culina 

Civil suits, multiple states, data breaches, new laws, due diligence and due care.  What does this mean for you now and in the future? 

Kevin Hamel,

Vice President, Security Officer, Security

COCC 

Farmington CT
Banking requirements and New Regulations for 2010

Brian Trevey  
Trustworthy

PCI-DSS, What you need to know.

BIOGRAPHIES

A. Scott Mansolillo 

Scott Mansolillo is the Vice President, Associate General Counsel and Director of Compliance for The Hartford Financial Services Group and has held that position since January 2002.  He is responsible for The Hartford’s enterprise-wide compliance program including state insurance regulatory compliance, code of ethics, anti-money laundering, OFAC and FCPA matters, record retention and other corporate policies.  He also serves as The Hartford’s Chief Privacy officer.  Prior to joining The Hartford, he was Vice President and General Counsel of XTRA Corporation, the second largest transportation equipment lessor in North America where he was responsible for all legal matters.  XTRA was acquired by Warren Buffet’s Berkshire Hathaway, Inc in November 2001.  Prior to joining XTRA in 2000, he held increasingly responsible positions in the Law Department at The Hartford and then was named Assistant Vice President, Capital Planning and Development in the office of the Chief Financial Officer where he was responsible for developing strategies for future capital deployment.  He was in private practice from 1987-1992 concentrating in commercial lending, real estate and corporate finance transactions. 

Scott received his undergraduate degree from Providence College and his law degree from Boston College Law School. 

Jerry Hughes 

Jerry Hughes is Director of the Lighthouse IT Governance, Audit and Compliance Practice, with more than 25 years experience in helping companies navigate industry and government regulations. Mr. Hughes is a Certified Information Systems Auditor (CISA), a Payment Card Industry (PCI) Qualified Security Assessor (QSA), and is certified in CoBIT, a best-practices framework for IT management. He is also a frequent speaker on IT regulatory compliance issues.

Jennifer Morgan DelMonico

Kevin Hamel

Vice President and Corporate Security Officer for COCC, Kevin Hamel is responsible for all physical and information security and risk management. Mr. Hamel works extensively with regulatory agencies to coordinate compliance with applicable laws. He also manages the company’s relationship and activities with appropriate law enforcement agencies.  Mr. Hamel holds a Bachelor of Science degree in Computer Information Systems plus a Masters degree in Business Administration. He is a member of ISSA, FSISAC and Infragard, and was recently appointed to Western New England College's External IT Advisory Board to provide strategic expertise and counsel with regard to information technology development.

Brian Trevy