HIPAA, or the Health Insurance Portability and Accountability Act, provides a set of information security requirements for organizations that fall under the category of a covered entity. These are organizations that handle, transmit, or receive electronic protected health information (ePHI).
HIPAA regulations not only apply to clinics and healthcare providers, but any healthcare-related organizations such as medical device companies, or organizations that handle data that falls under the definition of PHI.
The information security demands on a top five US healthcare provider are complicated, to say the least. Adam and team helped us to develop and implement a multi-year security program roadmap and accompanying program processes to ensure we are well positioned to take on the complexities of the future.
Chief Information Security Officer, UCLA Health
We were trying to understand the best structure for establishing a security program that supported all the highly differentiated businesses within our corporate family. Their roadmap and accompanying work provided a foundation that helped us set priorities for the program in place today.
Chief Compliance & Security Officer, The Word & Brown Companies