Mountain Pacific Receives FISMA Compliance Report
by Madison Lenhart / November 19th, 2025
Independent Audit Verifies Mountain Pacific’s FISMA Compliance
Helena, MT – Mountain Pacific, a nonprofit, health care improvement organization, is proud to announce they completed their FISMA audit. This independent review of their information security control structure demonstrates their compliance with the Federal Information Security Modernization Act (FISMA).
FISMA was enacted as part of the Electronic Government Act of 2002. Its intent is to protect government information and assets from unauthorized access, use, disclosure, disruption, modification or destruction of information and information systems. FISMA is the law, but National Institute of Standards and Technology (NIST) standards actually contain the individual security controls required to comply with FISMA. NIST allows organizations to tailor the relevant security control baseline to more closely align with their mission, business requirements and environments of operation. The FISMA audit conducted by KirkpatrickPrice verifies that Mountain Pacific complies with these requirements as they relate to FISMA.
“We determined from our review that Mountain Pacific has good technical controls in place in accordance with industry-accepted standards and appropriate physical and environmental controls and is in compliance with all FISMA requirements,” said Joseph Kirkpatrick, president of KirkpatrickPrice.
Mountain Pacific CEO Jill Alessi said this achievement is testament to the hard work and collaboration of the entire organization’s team and their service to their health care partners and communities. “Achieving this gold standard in protecting information reflects our team’s commitment to security, trust and excellence in everything we do,” said Alessi. “This was truly a team effort across our organization, and I am proud of everyone who played a role in this effort, especially our IT team for contributing their expertise and dedication to make this achievement possible.”
“Our IT team demonstrated exceptional leadership, and our success reflects the dedication of staff across Mountain Pacific,” said Chief Information Officer Rhett Jackson. “KirkpatrickPrice’s thorough, professional and highly rigorous audit process confirmed our strong security posture and FISMA compliance. We remain committed to ongoing training, policy improvements and regular audits to sustain these high standards.”
In addition to FISMA compliance, Mountain Pacific is also URAC accredited in utilization management, a distinction they have held for more than a decade.
About Mountain Pacific:
Since 1973, Mountain Pacific has built a legacy of collaboration. A nonprofit health care improvement organization, Mountain Pacific’s team of experts guides partners through complex challenges with expertise, collaboration, training and education, data analysis and other professional services to innovate better health and health care. Their team includes clinicians, analysts, nurses, pharmacists, former administrators and other seasoned health care professionals who serve as an extension of their partners’ teams, tailoring data-driven solutions to create long-lasting improvements and measurable results. For more information, visit https://mpqhf.org, or send a message at https://mpqhf.org/contact-us.
About KirkpatrickPrice:
KirkpatrickPrice is the leader in cyber security and compliance audit reports. Their experienced auditors know audits are hard, so they take complicated audits such as SOC 1, SOC 2, PCI DSS, HIPAA, HITRUST, GDPR, and ISO 27001 and make them worth it. The firm has issued over 20,000 reports to over 2,000 clients worldwide, giving its clients trusted results and the assurance they deserve. Using its Online Audit Manager, the world’s first compliance platform, KirkpatrickPrice partners its clients with an expert to guide them through the entire audit process, from audit readiness to final report. For more information, visit kirkpatrickprice.com, follow KirkpatrickPrice on LinkedIn, or subscribe to our YouTube channel.
