Security & Compliance
Data Security to Meet Federal Standards
Our organization leverages more than 75 years of health care IT experience to build one of the industry’s most comprehensive security programs.
Our cybersecurity services, based on the National Institute of Standards and Technology (NIST) Risk Management Framework, keep sensitive data secure through:
- Multi-layered security structure
- Stringent physical and logical access controls
- Continuous security monitoring and proactive defense
- Annual security training and other controls
Department of Defense (DoD)
Federal Information Security Management Act (FISMA) High Rated
Health Insurance Portability and Accountability Act (HIPAA)
Health Information Technology for Economic and Clinical Health (HITECH)
Health Information Trust Alliance (HITRUST)
Minimum Acceptable Risk Standards for Exchanges (MARS-E)
Capability Maturity Model Integration (CMMI) Maturity Level 3
ISO 9001:2015
ISO/IEC 27001:2022
ISO SMS 20000-1:2018
SAS 70/SSAE 18 SOC2 Audit Compliance
We develop our security posture to meet the most stringent federal, state and commercial requirements, while providing comprehensive and near-real-time monitoring.