ColdFusion HIPAA Compliance Checklist: Encryption, Audit Logging, and Access Controls

Introduction
A hospital portal, a claims system, a patient intake form, a lab results viewer — a great many of these run on ColdFusion, and a great many were written before anyone on the team had heard the phrase “ePHI.” They work. They have worked for fifteen years. And they were built in an era when cfquery with string concatenation was normal, passwords were hashed with MD5 if at all, and "audit log" meant whatever happened to end up in application.log.
Read More