WebMD Health Services announced it has achieved HITRUST CSF Certification. The certification covers Personal Health Manager, Site Manager, Active Coaching, and Supporting Infrastructure, which includes personal health data across all WebMD Health Services’ core offerings, products, and platforms. The certification places WebMD Health Services among a group of companies that have met the highest level of safeguards for protecting and securing personal health information.
While WebMD Health Services has consistently maintained rigorous levels of risk management against cyberattacks, it decided to go further, choosing to earn a certification now widely considered the gold standard, and providing consumers as well as health plan and employer clients verifiable peace of mind.
“While we have consistently maintained the highest levels of risk management to protect sensitive health information, we knew that it was important in the current environment to give our clients and consumers the additional third-party validation that has become the benchmark certification in the healthcare industry,” said Ben Slocum, CEO of WebMD Health Services
HITRUST CSF Certified status demonstrates that WebMD Health Services data security infrastructure has met industry-defined requirements, is appropriately managing risk, meets federal and state regulations, standards and frameworks, and incorporates a risk-based approach. The healthcare industry is among those at high risk for data breaches.
“The HITRUST CSF has become the information protection framework for the healthcare industry, and the CSF Assurance Program is bringing a new level of effectiveness and efficiency to third-party assurance,” said Ken Vander Wal, chief compliance officer of HITRUST. “The CSF Certification is now the benchmark that organizations required to safeguard personal healthcare information are measured against with regards to information protection.”
