Health3PT: Empowering Vendors to Tackle Third-Party Cyber Risks in Healthcare
Health3PT aims to introduce standards, assurance models, and automated workflows to resolve TPRM issues and protect sensitive information.
HITRUST v11: Path to Certification Is Now 45% Faster
Out with ‘CSF’ and in with a whole new set of assessment options. Learn what is coming from HITRUST in 2022.
Interoperability & Compliance: Are They Pulling Healthcare in Different Directions?
The challenge for healthcare today is to find the right balance between compliance and interoperability,
New Social Engineering Attack Simulates Healthcare Software
How a hacker group simulated healthcare software to scam patients into divulging personal information.
What You Can Do NOW to Become a TEFCA Participant
EXCLUSIVE INFORMATION: Learn directly from HITRUST’s VP of Adoption what you can do to become a TEFCA participant, QHIN, or sub-participant.
HITRUST Supports the TEFCA Program and QHIN Compliance
The HITRUST r2 is the only assessment OKed to show compliance with TEFCA security requirements and achieve QHIN cybersecurity certification.
HITRUST® Scope: Factors to Determine HITRUST Engagement
The HITRUST CSF® is a risk- and compliance-based controls framework which helps organizations to validate the privacy and security of their information systems. As an organization prepares for HITRUST CSF assessments, it must outline the scope of engagement. Determining the scope makes it possible to efficiently evaluate the right data and systems during the given …
HITRUST® Scope: Factors to Determine HITRUST Engagement Read More »
Overview of the HITRUST Quality Assurance Review Process
The HITRUST® Quality Assurance Review is the fourth phase of the journey towards certification. During this phase, the HITRUST Assurance and Compliance teams will both check the validated assessment and determine whether the organization has met the requirements to achieve certification. In this in-depth series of articles about the process to achieve HITRUST CSF Certification, …
Overview of the HITRUST Quality Assurance Review Process Read More »
HITRUST Shared Responsibility™ Program: Understanding CSP Security Control Coverage
From storing customer data, deploying business-related apps, or hosting computer system infrastructures, cloud service demands are on the rise for business owners. Having the right cloud service provider allows you to keep your operations running. Yet you also understand that by using the cloud to gather, store and transmit data, you’ll need the appropriate security …
HITRUST Shared Responsibility™ Program: Understanding CSP Security Control Coverage Read More »
What Does It Mean to Be HITRUST Certified?
HITRUST CSF Certification is often the ultimate goal when preparing for and undergoing HITRUST® assessments. It has become a benchmark for data protection standards in the healthcare field and is now being widely adopted in others that handle sensitive data, such as the financial services industry. It helps organizations, business associates, and vendors to manage …
What Is a HITRUST® Interim Assessment?
If you’re learning about the HITRUST® certification, you probably already know that certification doesn’t last a lifetime. The beauty of the HITRUST approach is its focus on continual improvement. This means that organizations must work to maintain and regularly renew their certification. Guided by the HITRUST CSF Maturity Model, they are actively involved in sustaining …
Combining HITRUST® and SOC 2 Makes Compliance More Efficient
Information security is a growing concern for many organizations, especially those that handle financial and healthcare information. Many such organizations are required to undergo a SOC 2 examination. This type of assessment provides assurance that their security controls are designed and operating effectively. SOC 2 Reporting A SOC 2 examination focuses on one or more …
Combining HITRUST® and SOC 2 Makes Compliance More Efficient Read More »
