{"id":193,"date":"2020-02-18T23:57:28","date_gmt":"2020-02-19T04:57:28","guid":{"rendered":"http:\/\/apexcompliance.net\/blog\/target\/what-are-the-pros-and-cons-of-hitrust-certification\/"},"modified":"2020-02-19T03:12:04","modified_gmt":"2020-02-19T08:12:04","slug":"what-are-the-pros-and-cons-of-hitrust-certification","status":"publish","type":"post","link":"https:\/\/apexcompliance.net\/blog\/2020\/02\/18\/what-are-the-pros-and-cons-of-hitrust-certification\/","title":{"rendered":"Pros and Cons of HITRUST Certification"},"content":{"rendered":"<p>To quickly summarize a very complex subject, HITRUST is an organization that helps regulate <a href=\"https:\/\/thetechnews.com\/2019\/09\/12\/it-security-tips-for-your-business\/\">data security<\/a> standards within the healthcare industry. It is similar to HIPAA, but while HIPAA was written and is enforced by the federal government, HITRUST is governed by a collective body of the healthcare industry.<\/p>\n<p>To that effect, HITRUST is the healthcare industry\u2019s method of self-regulating security practices within the industry, and addressing certain shortcomings of HIPAA, as well as creating a PCI-like compliance framework for business entities to follow.<\/p>\n<p>It\u2019s easy to think of HITRUST certification as any other kind of non-mandatory certification a business can obtain, but that\u2019s not the entire picture. For starters, HIPAA compliance does not come with any certification. HITRUST certification is one way of showing that a business is HIPAA compliant, <a href=\"https:\/\/www.armor.com\/blog\/hitrust-compliance\/\">because obtaining HITRUST compliance<\/a> addresses many of the HIPAA compliance requirements.<\/p>\n<p>To that degree, you may be wondering whether HITRUST certification is \u201cworth it\u201d, and the answer is pretty much yes. Business entities that must adhere to HIPAA standards generally have a difficult time self-assessing their HIPAA compliance level without a framework to follow, and so HITRUST provides a CSF (<i>Common Security Framework) <\/i>for the industry, which helps business entities much better self-assess whether or not they are HIPAA compliant.<\/p>\n<p id=\"mct_ai_excerpt\">[&#8230;]<\/p>\n<p><em><strong>Author | <a href=\"https:\/\/thetechnews.com\/author\/forbes-emily\/\">Emily Forbes<\/a> <\/strong><\/em><\/p>\n<p id=\"mct-ai-attriblink\"><a href=\"https:\/\/thetechnews.com\/2020\/01\/23\/what-are-the-pros-and-cons-of-hitrust-certification\/\" target=\"_blank\" rel=\"noopener noreferrer\">Click here to view full original article at thetechnews.com<\/a><\/p>\n<p id=\"mct-ai-attriblink\">\n","protected":false},"excerpt":{"rendered":"<p>To quickly summarize a very complex subject, HITRUST is an organization that helps regulate <a href=\"https:\/\/thetechnews.com\/2019\/09\/12\/it-security-tips-for-your-business\/\">data security<\/a> standards within the healthcare industry. It is similar to HIPAA, but while HIPAA was written and is enforced by the federal government, HITRUST is governed by a collective body of the healthcare industry.<\/p>\n<p>To that effect, HITRUST is the healthcare industry\u2019s method of self-regulating security practices within the industry, and addressing certain shortcomings of HIPAA, as well as creating a PCI-like compliance framework for business entities to follow.&hellip; <a href=\"https:\/\/apexcompliance.net\/blog\/2020\/02\/18\/what-are-the-pros-and-cons-of-hitrust-certification\/\" class=\"read-more\">Read More <\/a><\/p>","protected":false},"author":1,"featured_media":194,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[17,27],"_links":{"self":[{"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/posts\/193"}],"collection":[{"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/comments?post=193"}],"version-history":[{"count":0,"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/posts\/193\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/media\/194"}],"wp:attachment":[{"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/media?parent=193"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/categories?post=193"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/apexcompliance.net\/wp-json\/wp\/v2\/tags?post=193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}