Pharmiweb ChannelsAll | PharmaCo | Clinical Research | R&D/BioTech | Sales/Mktg | Healthcare | Recruitment | Pharmacy | Medical Comms

Pharmiweb.com RSS Feed Pharmiweb.com RSS Feeds

Advertising

Press Release

Expedient Announces Availability of Updated Service Organization Control Reports, Now Including HITRUST CSF

Expedient
Posted on: 08 Jan 18
Expedient Announces Availability of Updated Service Organization Control Reports, Now Including HITRUST CSF Written Attestation for Healthcare Organizations Required to Comply with HIPAA Applicable to Data Center and IaaS/DRaaS Cloud Services

PR Newswire

PITTSBURGH, Jan. 8, 2018

PITTSBURGH, Jan. 8, 2018 /PRNewswire/ --  Expedient, a cloud computing and data center infrastructure as a service provider (IaaS), announced today that it has published updated service organization control (SOC) reports that include controls pursuant to the Health Information Trust (HITRUST) Alliance Common Security Framework (CSF).

The HITRUST Alliance maintains a collaboration with the American Institute of Certified Public Accountants (AICPA) to publish a set of recommendations that streamline and simplify the process of applying the CSF to SOC 2 reporting, an accounting standard for reporting service organization controls at service providers. This complementary approach provides healthcare organizations that must comply with the Health Insurance Portability and Accountability Act (HIPAA) the ability to rely upon one comprehensive framework relevant to their organization type.

SOC reports offer a confirmation of services provided by third party service organizations including information that users need to assess and address the risks associated with an outsourced service. They're designed to help information technology organizations build trust and confidence in their service delivery processes and controls through an independent report from a CPA.

Expedient annually publishes SOC 1, SOC 2 and SOC 3 reports for each of its eleven (11) colocation data centers based upon the National Institute of Standards and Technology (NIST) Special Publications control framework, including NIST SP 800-53, however, this is the first year that HITRUST CSF controls have been included. "Expedient has been a party to HIPAA business associate agreements with healthcare industry clients such as hospitals, health plans and insurance brokerages, healthcare clearing houses, and healthcare software as a service (SaaS) providers for many years. The integration of SOC 2 for HITRUST controls further extends our team's commitment to written attestation of their effectiveness in our effort to complement client's own pursuit of compliance," said Jonathan H. Rosenson, Senior Vice President of Strategic Initiatives.

About Expedient
Expedient is a cloud and data center infrastructure as a service (IaaS) provider with local operations in Pittsburgh, PA; Baltimore, MD; Boston, MA; Cleveland, OH; Columbus, OH; Indianapolis, IN and Memphis, TN. Ranked as one of the Top 10 managed services providers worldwide on the 2017 MSPMentor 501 list, Expedient's converged solutions enable clients to focus on strategic business innovation, while the Expedient team handles operation of the information technology needed to support it. Expedient data centers are compliant with the Health Insurance Portability and Accountability Act (HIPAA) as well as the Payment Card Industry Data Security Standard (PCI DSS); the company also certifies to the EU-U.S. Privacy Shield framework for the protection of personally identifiable information. Learn more at expedient.com.

View original content with multimedia:http://www.prnewswire.com/news-releases/expedient-announces-availability-of-updated-service-organization-control-reports-now-including-hitrust-csf-300578969.html

SOURCE Expedient

PR Newswire
www.prnewswire.com

Last updated on: 08/01/2018

Advertising
Site Map | Privacy & Security | Cookies | Terms and Conditions

PharmiWeb.com is Europe's leading industry-sponsored portal for the Pharmaceutical sector, providing the latest jobs, news, features and events listings.
The information provided on PharmiWeb.com is designed to support, not replace, the relationship that exists between a patient/site visitor and his/her physician.