penelope case management software

SOFTWARE AS A SERVICE INFORMATION PACKAGE

athena software

Penelope is a powerful, integrated case management solution that will help transform the way your organization engages with clients, works collaboratively, demonstrates outcomes and delivers quality, best practice services.

To achieve maximum impact, Penelope is delivered as part of a suite of comprehensive end to end solutions designed to provide maximum benefit to your organization during all stages of your transformational journey.

Along with our best in class professional services delivered via the Penelope Excellence Pathways, we provide rock solid Software as a Service offerings that are local, scalable, secure and privacy standards compliant.

Our SaaS offerings allow you to focus on your core business, reduce risk and save money from outsourcing your data hosting, application management, data protection and much of your disaster recovery needs to a provider trusted by organizations around the world.

rock solid Cloud Services.

PENELOPE

SOFTWARE AS A SERVICE

RISK MANAGEMENT FRAMEWORK

HIGH AVAILABILITY + PERFORMANCE

EASY FOR YOUR IT DEPARTMENT

LOCALIZED PROVISION

HIPAA/ PIPEDA/ HITECH COMPLIANCE

"I've worked with major

corporations and universities and

I am really impressed with

Athena's hosted server and its capacity to deliver optimal results

day after day. This secure data

centre works better than many

other organizations with millions

invested in IT and cloud hosting."

Peter S, W.J. Stelmaschuk and

Associates, Canada

The ultimate goal of our Software as a Service (SaaS) model is to make using Penelope as easy, efficient and secure as possible.

At Athena Software, we have implemented a comprehensive set of measures and safeguards that we are confident provide the highest degree of security to protect your data from unauthorized access, protect your data from catastrophic loss and maximize uptime and availability.

These measures begin with the physical facility where data is hosted (our data centre), the design and capabilities of Athena’s server, and the architecture of the Penelope application. This includes the built-in functional specifications, feature-sets and every aspect of our staff’s work with your agency’s confidential data within Penelope.

Every component of service and security is meticulously planned. We implement data security, integrity and protection strategies that are driven by our relentless attention to detail and commitment to excellence in all aspects of service.

secure, local, reliable & Compliant.

USA UNITED KINGDOM

AUSTRALIACANADA

Your Data never leaves your Country.

NEW ZEALAND

DATA CENTRES SCHEDULED TO LAUNCH IN 2016

Data Protection Residency Assurance

What is Software as a Service?

Instead of purchasing licenses, provisioning servers, building and managing secure facilities, ensuring multiple redundancies, performing the maintenance, as well as disaster recovery and other complex (and expensive) IT tasks required to manage your own software, our SaaS offering is available from the internet to securely hosted data residing on our servers.

untangling the Terminology.

DATA IS PROTECTED AND SECURE

You always own your data, it never leaves the country where it is securely hosted and we meticulously deploy an advanced risk mitigation procedures, policies and technical, physical and administrative safeguards to protect against unauthorized access.

All software and services are available on a subscription model so you only need to pay for what you need at the time - allowing you to scale according to your own timeframe, requirements and budget. With the subscription model, your up front costs are much lower and speed out over time.

AVAILABLE ON A SUBSCRIPTION MODEL

We take care of complex server maintenance, capital costs, hardware, backups, firewalls, updates etc. - all you need is a recent web browser and an internet connection to securely access your data anywhere you can connect to there web

WE TAKE CARE OF SECURITY, INFRASTRUCTURE, PERFORMANCE & AVAILABILITY

Athena provides 99.99% uptime guarantees (with generous credits for periods of unplanned downtime if they should occur) as well as clear Service Level Agreements that define response times and escalation paths.

UPTIME GUARANTEES & SERVICE LEVEL AGREEMENTS

Your “all-in” subscription fee includes access to the software, technical support, fixed file storage space, and many other benefits. Custom tailored solution packages can be built to suit your requirements beyond our standard offerings.

SINGLE, EASY TO UNDERSTAND “ALL-IN” MONTHLY PRICE

SaaS Benefits.

SOFTWARE AS A SERVICE

Best in Class Service.

WORLD CLASS AVAILABILITY

WORLD CLASS SECURITY

WORLD CLASS REDUNDANCY

LOWER COSTS & SCALABILITY

REDUCED TIME TO BENEFIT

BETTER UTILIZATION OF INTERNAL

STAFF

EASY UPGRADES

2 STAGE BIOMETRIC AUTHENTICATIONHIPAA / HITECH COMPLIANCE

INDIVIDUALLY LOCKED CABINETS

N+1 POWER REDUNDANCY INCLUDING BATTERY POWER SUPPLY AND DIESEL GENERATORS

N+1 COOLING REDUNDANCY

FM-200 GAS FIRE SUPPRESSION

MULTI-DIVERSE CARRIER AND FIBRE PATHS AND MULTI-HOMED FULLY REDUNDANT MPLS NETWORK WITH END TO END QoS

ENABLED LOW LATENCY AND SWITCHING ARCHITECTURE

VIRTUAL MACHINES IMPROVE RESILIENCY AND PROVIDE SCALABILITYFIREWALLS AND INTRUSION DETECTION SYSTEMS

ACCESS AND PERFORMANCE MONITORING

DISASTER RECOVERY PREPAREDNESS

ENCRYPTION AT REST AND IN TRANSIT

PCI DSS, ISAE 3402, SSAE 16, AT 101, AND CSAE 3416 CERTIFICATIONS AT OUR TIER II DATA CENTRES

99.99% UPTIME GUARANTEEALL SYSTEMS ARE FULLY MANAGED BY ATHENA SOFTWARE

PHYSICAL ACCESS CONTROLS

DEVICE AND MEDIA CONTROLSPRIVACY CONTROLS

PIPEDA COMPLIANCE

AUSTRALIA PRIVACY LEGISLATION

DATA SECURITYADMINISTRATIVE SAFEGUARDS

UNIQUE USER AUTHENTICATIONMULTI-FACTOR AUTHENTICATION

AUDIT CONTROLS

DATA INTEGRITY

DECREASE RISK, COST AND RESPONSIBILITIES

DISCLOSURE PROTECTIONPRINCIPLE OF MINIMUM NECESSITY

PAY AS YOU GO

WORK ANYWHERE

CONTINUOUS SECURITY UPGRADES

RAPID DEPLOYMENT

SEAMLESS UPGRADES

SERVICE LEVEL AGREEMENTS

LONG TERM RELATIONSHIP

SAVE MONEY ON HARDWARE

COMPATIBILITY WITH EXISTING INFRASTRUCTURE

RISK MITIGATION

WORKFORCE MOBILITY

SCALABILITY

REDUCED CAPITAL EXPENDITURES

FASTER GO -LIVE

SHORTER TIME TO VALUE INTERVAL

IMPROVED RESILIENCY

BETTER PERFORMANCE

OUTSOURCED IT MANAGEMENT

PREDICTABLE IT EXPENDITURES LOWER TOTAL COST OF OWNERSHIP

Athena Software uses a comprehensive risk management framework modelled after NIST SP 800 37 rev1 and NIST SP 800-39.

A formal risk management team evaluates ongoing audits and incidents, conducts an annual multi-faceted risk assessment and implements the resulting risk response plan. The risk assessment approaches used includes threats-based analyses, business process and information system analyses and penetration testing for our hosting facilities.

Athena has also developed a comprehensive set of pol icies and procedures with accompanying staff training programs that govern all activities relating to the protection of confidential data, including protected health information (PHI). Finally, Athena conducts periodic third party security audits and penetration testing.

data Protection, Integrity & Availability.

risk management Framework.

Using the principle of MINIMUM NECESSITY means that Athena limits our exposure to protected health information (PHI) to the minimum necessary to accomplish the intended purpose, and in the majority of instances it is not necessary for us to view or acquire PHI at all while completing authorized service requests.

DATA PROTECTION

TECHNICAL SAFEGUARDS

PHYSICAL SAFEGUARDS

ADMINISTRATIVE SAFEGUARDS

NIST SP 800 37 REV1 & NIST SP 800-39

HIPAA/ HITECH / PIPEDA COMPLIANCE

AUSTRALIAN PRIVACY LEGISLATION

Athena Software is extraordinarily committed to ensuring that protected health information remains confidential, is not viewed, acquired or otherwise accessed by any Athena staff except in response to a specific authorized request from your organization or otherwise as required by law.

Data privacy provisions are interwoven into all aspects of our operations - from the design of Penelope to the configuration and management of our data centres to our internal administrative controls to our staff training, management and the way we deliver client services.

Athena Software’s Business Associate Agreement defines permitted and non-permitted uses and disclosures of protected health information based on the principle of Minimum Necessity. These terms form our standard practices irrespective of jurisdiction. As such, data is not used or disclosed by Athena staff except as authorized by your organization to perform specific service requests or as required by law.

Please do not hesitate to contact us with questions or concerns about Athena’s security and privacy standards. We will be pleased to provide additional information that further details our comprehensive and meticulously planned and implemented risk management and data security framework.

protecting your Privacy.

PRIVACY OF ePHI

EXTERNAL SECURITY AUDITS

POLICIES & PROCEDURES

BUSINESS ASSOCIATE AGREEMENTS

world-class data Privacy.

Page � of �8 8

penelope case management software

athena software

www.athenasoftware.net info@athenasoftware.net

1st floor, 33 Dupont Street East Waterloo, Ontario  Canada N2J 2G8

NORTH AMERICA 1.866.806.6014 AUSTRALIA 02 8005 8037 UK 020 3239 1689 NZ 027 228 0105 FAX 519.570.3147