WebMD Health Services achieves HITRUST CSF Certification to further mitigate risk in third-party privacy, security, and compliance

April 13, 2018

WebMD Health Services announced it has achieved HITRUST CSF Certification. The certification covers Personal Health Manager, Site Manager, Active Coaching, and Supporting Infrastructure, which includes personal health data across all WebMD Health Services’ core offerings, products, and platforms. The certification places WebMD Health Services among a group of companies that have met the highest level of safeguards for protecting and securing personal health information.

While WebMD Health Services has consistently maintained rigorous levels of risk management against cyberattacks, it decided to go further, choosing to earn a certification now widely considered the gold standard, and providing consumers as well as health plan and employer clients verifiable peace of mind.

“While we have consistently maintained the highest levels of risk management to protect sensitive health information, we knew that it was important in the current environment to give our clients and consumers the additional third-party validation that has become the benchmark certification in the healthcare industry,” said Ben Slocum, CEO of WebMD Health Services

HITRUST CSF Certified status demonstrates that WebMD Health Services data security infrastructure has met industry-defined requirements, is appropriately managing risk, meets federal and state regulations, standards and frameworks, and incorporates a risk-based approach. The healthcare industry is among those at high risk for data breaches.

“The HITRUST CSF has become the information protection framework for the healthcare industry, and the CSF Assurance Program is bringing a new level of effectiveness and efficiency to third-party assurance,” said Ken Vander Wal, chief compliance officer of HITRUST. “The CSF Certification is now the benchmark that organizations required to safeguard personal healthcare information are measured against with regards to information protection.”

PR Newswire has the full release

Sponsored Recommendations

Enhancing Remote Radiology: How Zero Trust Access Revolutionizes Healthcare Connectivity

This content details how a cloud-enabled zero trust architecture ensures high performance, compliance, and scalability, overcoming the limitations of traditional VPN solutions...

Spotlight on Artificial Intelligence

Unlock the potential of AI in our latest series. Discover how AI is revolutionizing clinical decision support, improving workflow efficiency, and transforming medical documentation...

Beyond the VPN: Zero Trust Access for a Healthcare Hybrid Work Environment

This whitepaper explores how a cloud-enabled zero trust architecture ensures secure, least privileged access to applications, meeting regulatory requirements and enhancing user...

Enhancing Remote Radiology: How Zero Trust Access Revolutionizes Healthcare Connectivity

This content details how a cloud-enabled zero trust architecture ensures high performance, compliance, and scalability, overcoming the limitations of traditional VPN solutions...