The HITRUST framework is the definitive information-protection framework for data in the healthcare industry

It’s the gold standard and the benchmark against which organizations measure themselves when charged with safeguarding personal health information (PHI). HITRUST consolidates more than 15 global standards and regulations, including HIPAA, PCI, COBIT, NIST, ISO, FTC, and state laws, as well as leading practice frameworks for security and compliance.

HITRUST requires more than 400 controls and implementation requirements. This is far more stringent than typical data center audits such as SSAE 18 and SOC 2, which simply demonstrate snapshot compliance to physical and logical controls.

Ask your cloud service provider if they’re HITRUST-certified. And if they’re not, it might be time to ask yourself if that risk is acceptable for your practice.

Learn More