Ria Health
A case study of how Ria Health, a healthcare platform for alcohol addiction, obtained the HITRUST CSF certification with the help of Clarify Consult, a cybersecurity consulting firm.
The challenge
Ria Health is a HITRUST CSF-certified healthcare platform in the USA that provides a verified methodology for individuals to combat alcohol addiction. The platform is supported and recommended by the National Institute of Health, part of the United States Department of Health and Human Services.
HITRUST CSF is a comprehensive security and privacy framework that aligns with various standards and regulations, such as HIPAA, NIST, and ISO. HITRUST CSF requires all certified entities to conduct an annual audit of the implemented Information Security Management Program to validate the implementation of controls and effective operation. Ria Health wanted to minimize the impact of the audit on its operational and technical team and ensure that it maintained its certification status and compliance level.
The company had a dynamic cloud environment that hosted sensitive health data and needed to be continuously monitored and secured according to the best practices and standards. Ria Health contacted the Clarify Consult team to assist them with the annual audit process and to provide them with a comprehensive and cost-effective solution.
The solution
Clarify Consult is a cybersecurity consulting firm that specializes in helping small and medium-sized enterprises (SMEs) achieve and maintain HITRUST CSF certification. The Clarify Consult team has extensive experience and knowledge in the security and compliance domains and has helped dozens of clients across various industries to obtain and retain the HITRUST CSF certification.
The Clarify Consult team conducted a pre-audit assessment and a cloud security posture assessment for Ria Health, identifying the gaps and issues that needed to be addressed and providing practical recommendations. The team also set up a streamlined process to collect and review the evidence for each control domain, ensuring that Ria Health had all the documentation and artifacts ready for the audit.
The result
The audit report confirmed that Ria Health had implemented and operated the controls effectively, met all the requirements of the HITRUST CSF framework, and provided independent oversight to the Executive Board regarding the implemented Information Security Management Program.
"The Clarify Consult team has been exceptional and a pleasure to work with. Their deep experience with HITRUST CSF was one of the main reasons we chose them, and I'm glad to say that the team has impressed us at every step, often going above and beyond. I would recommend Clarify Consult for anyone looking for an expert in HITRUST CSF and other compliance frameworks and best practices."
