The HITRUST CSF harmonizes the requirements of existing standards and regulations, including federal (HIPAA, HITECH), third party (PCI, COBIT) and government (NIST, FTC) and is the basis for assessments conducted through the HITRUST CSF Assurance program.
Rsam has a strong background providing GRC solutions to many of the leading healthcare providers, health plans and many federal agencies including some of the regulators in the healthcare and financial space. Whether healthcare organizations have already adopted the CSF or are just starting to work with the framework, Rsam enables them to automate the core processes of data collection and remediation tracking, perform advanced risk analysis and easily create dashboards and reports using a simple drag-and-drop interface. Over time, customers can also add solutions such as Threat and Vulnerability Management, Incident Tracking and others, to their existing GRC program using the Rsam Platform as a central repository to manage risks from a holistic perspective.
"We are very excited about the collaboration with HITRUST. The CSF is an excellent, comprehensive framework for healthcare organizations,"
“HITRUST is always looking for ways to add greater efficiencies and flexibility for organizations conducting assessments through the CSF Assurance program,” said Daniel Nutkis, Chief Executive Officer, HITRUST. “By incorporating the CSF within the Rsam GRC Platform, we are able to offer automation features and advanced risk analysis that achieve these goals and more.”
Rsam is one of the most widely deployed GRC solutions meeting the needs of many types of customers and verticals. Since 2003, Rsam has been successfully implemented at hundreds of organizations and government agencies helping them effectively identify, assess, manage and mitigate risks, while providing enterprise-wide visibility, oversight and assurance. Rsam’s modular solutions streamline the GRC process while reducing costs in the areas of Assessments, Audit, Compliance, Enterprise Risk, Incident Management, Issues & Remediation, Policy Management, Threat & Vulnerability and Vendor Risk.
The Health Information Trust Alliance (HITRUST) was born out of the belief that information security should be a core pillar of, rather than an obstacle to, the broad adoption of health information systems and exchanges. HITRUST, in collaboration with healthcare, business, technology and information security leaders, has established the Common Security Framework (CSF), a certifiable framework that can be used by any and all organizations that create, access, store or exchange personal health and financial information.
# # #
Rsam is a leading provider of enterprise governance, risk & compliance (GRC) solutions. Rsam aolutions combine business criticality, regulatory assessment data, vulnerabilities and findings to enable enterprise wide visibility, oversight and assurance.