HITRUST Part 4 Looking Forward

As a continuation of the HITRUST blog series, in this post I would like to explore the concept of certification, and what it means.

HITRUST is rapidly gaining popularity in the healthcare and security consulting fields, and NetSPI is investing significant resources in developing services that will assist clients in taking advantage of the new Common Security Framework (CSF), as well as in achieving all the benefits of optimizing information security programs against an industry-developed and accepted framework.

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

As a continuation of the HITRUST blog series, in this post I would like to take a closer look at the Common Security Framework CSF, and what it’s all about.

DEA's October 2011 EPCS clarifications listed an approved certifying organization, but under 21 CFR 1311.300(a) a qualified third-party audit is an equally valid path. Beware rubber-stamp certifiers.

I recently had the opportunity to review an article by Michael Koploy of Software Advice titled "HHS Data Tells the True Story of HIPAA Violations in the Cloud".