Главная
Study mode:
on
1
Intro
2
About me
3
Goals
4
Assumptions
5
Why HITRUST? - Multiple authoritative sources
6
Ginger HITRUST Journey
7
Ginger HITRUST Metrics (1/2)
8
Breakdown
9
Perform the gap assessment and remediation yourself
10
Gap Remediation
11
Make HITRUST part of your Information Security Program
12
Initiate an organization-wide Security Awareness Program
13
Get at least one team member HITRUST CCSEP certified
14
Identify the inheritance controls
15
Include technical controls in SDLC
16
Implement a SaaS Management tool
17
Electronically approve documentation
18
Start with the relevant scope
19
Document everything!
20
Summary
Description:
Explore a cost-effective approach to achieving HITRUST certification in this 50-minute conference talk from BSidesSF 2022. Learn how Ginger successfully obtained HITRUST certification in less than $100K and 11 months, significantly reducing the average cost and time typically associated with the process. Discover strategies for performing gap assessments and remediation in-house, integrating HITRUST into your Information Security Program, and implementing organization-wide security awareness initiatives. Gain insights on leveraging inheritance controls, incorporating technical controls in SDLC, and utilizing SaaS management tools. Understand the importance of proper documentation, scope definition, and electronic approval processes. Benefit from practical tips on getting team members HITRUST CCSEP certified and streamlining the certification journey for healthcare organizations seeking this prestigious accreditation.

Achieving HITRUST on a Budget

Security BSides San Francisco
Add to list
0:00 / 0:00