Entries by Shannon Lane

7 Deadly Sins of a HITRUST CSF Assessment

At KirkpatrickPrice, we’ve worked with clients of all sizes – from startups to enterprise-level organizations. By working with so many organizations of varying sizes and industries, we’ve been able to identify seven primary pitfalls that make for a challenging audit environment, all of which represent initial difficulties that often lead to a failed or very drawn out HITRUST validated assessment attempts. In recognizing how significant these pitfalls are, our firm has designed our engagements to address these early and often over the course of the assessment, raising red flags whenever one is discovered. The following seven deadly sins of HITRUST, while in no particular order, are all of primary significance to the audit as a whole and occur with roughly the same frequency. To begin, let’s look at one of the biggest misconceptions about HITRUST.

What is Cybersecurity?

In today’s world, the thing we place the most value on isn’t tangible – it’s information. Whether it’s banking information, email accounts, social media accounts, Social Security number, loan information, or your shopping preferences, information has become a valuable commodity to those who understand its use.

Auditor Insights: Policies and Procedures Are Better Than Gold

Establishing policies and procedures is hard work, time-consuming, and will probably change your company culture. But, if you can commit to getting your policies and procedures in place and enforced, you’ll be shocked at the short-term win in how easy an audit becomes and even more shocked by the long-term advantages you gain.