Covered entities and business associates must protect electronic protected health information with administrative, physical and technical safeguards. We run those safeguards for you and document them for regulators, partners and HITRUST assessors.
Security Rule safeguard categories
The HIPAA Security Rule requires a documented risk analysis, risk management, workforce training, access controls, audit logging, integrity and transmission security for ePHI. The Breach Notification Rule sets deadlines when PHI is exposed.
HITRUST CSF builds on HIPAA, NIST and ISO into one certifiable framework, and requires internal audits every year to maintain certification.
Covered entities that create, receive or store ePHI.
Business associates that process PHI for covered entities.
Any vendor with access to patient data.
Where ePHI lives, who can reach it, and the risks that matter most.
Policies, training, access controls, encryption, logging and business associate agreements.
24×7 SOC, incident response plans and breach notification readiness.
HIPAA reviews and HITRUST internal audits to keep certification.
No official one exists. Organizations demonstrate HIPAA compliance through documented risk analysis, safeguards and, often, HITRUST certification or a SOC 2 + HIPAA report.
Yes. Digital Edge signs business associate agreements and operates as a HIPAA business associate.
Yes, including readiness, internal audits required yearly for certification, and the evidence HITRUST assessors request.
Pure Finance Group, an indirect home improvement lender based in Laurel, Maryland. recent engaged New York based Digital Edge to help them comply with the Graham-Leach B…
Keith J. Barry, Esq.··2 minCase Study - teamDigital Promotions, Inc. About Client: teamDigital Promotions is a digital marketing agency based in Bethel, Connecticut. For over 25 years, teamDigital…
Michael Petrov··3 minDigital Edge just guided a NASDAQ listed technology firm to SOC 2 Type 1 compliance. This client told us in late November 2021 that it was crucial that they get their SO…
Book a 30-minute alignment call. We map your gaps against the frameworks you answer to and show what the first 30 days with Digital Edge look like.