New HITRUST program to help start-ups with information privacy and security
HITRUST is helping start-up companies make information privacy and security a foundational component while still focusing on growing their business with the introduction of the RightStart Program. The new program helps start-ups accelerate their adoption of the most comprehensive risk management, compliance, privacy, and security suite of services in the marketplace.
As a security and privacy standards development and accreditation organization, HITRUST is bundling and pricing its programs to align with rapidly-growing small businesses ensuring management and customers that effective information privacy and security programs are a core tenet of the start-up firm’s operations.
Meeting these requirements should not be a barrier to business growth but too often start-up companies try to institute the proper programs in an ad hoc manner only to lose valuable time and money and in the end, not improving their risk posture.
Designed for start-ups that have been in business for less than three years, have fewer than 50 employees, and have less than $10 million in annual revenue, the program offers a comprehensive risk management solution. The Right Start Program streamlines the adoption of HITRUST’s best-in-class suite of services, including:
- The HITRUST CSF allows organizations to perform assessments and report against its comprehensive privacy and security controls or any one of the 35 authoritative sources included in the framework, such as the NIST Cybersecurity Framework, HIPAA, and GDPR.
- The HITRUST CSF Assurance Program provides a simplified and consistent approach to assessments and reporting against the HITRUST CSF. Since the HITRUST CSF synthesizes numerous standards and frameworks into a single comprehensive and harmonized framework, it negates the need for multiple assessments with an ‘Assess Once, Report Many’ approach.
- The HITRUST MyCSF Assessment Platform makes it easier and more cost-effective for an organization to manage information risk and meet international, federal, and state regulations concerning privacy and security.
- The HITRUST Academy offers the only training courses designed to educate security professionals about information protection and the utilization of the HITRUST CSF to manage risk.
