HITRUST Assessment Services for Healthcare Company

This case study details the HITRUST assessment services provided by Cherry Bekaert to a healthcare company seeking HITRUST certification for its historical clinical records solution. The company approached Cherry Bekaert's Information Assurance & Cybersecurity team to conduct a readiness assessment, which identified gaps that needed remediation to achieve certification. Key findings included the necessity for third-party penetration testing and a formal risk assessment. Cherry Bekaert performed a comprehensive internal, external, and web application vulnerability assessment, along with a cyber risk assessment to meet HITRUST requirements. The case study outlines the collaboration between Cherry Bekaert and the company's management to conduct a gap analysis and confirm remediation efforts. Additionally, it describes the development of a maturity model and a deployment strategy to address changes in processes and technology. The study emphasizes the importance of establishing a secure platform for accessing historical data and obtaining the HITRUST r2 Validated Assessment Certification to fulfill customer obligations.