Listing Thumbnail

    HITRUST Assessment and Advisory

     Info
    Healthcare organizations face significant compliance challenges when using AWS services for processing and storing protected health information. BDO has expertise helping its clients navigate the HIPAA compliance rules for data handled in AWS. BDO is HITRUST Alliance accredited as an approved, external assessor firm. To comply with the dynamic HITRUST requirements, our Assurance and Advisory Services teams help our clients navigate the HITRUST framework in AWS environments while assisting in the development of a prudent security program.

    Overview

    BDO's HITRUST services include:

    • Assessments of the in-scope AWS services (EC2, S3, RDS, Lambda, VPC, CloudWatch Logs, etc.) and personnel that are involved in the processing, transmission, and storage of sensitive information such as PII, PHI, and ePHI completed by HITRUST Certified CSF Practitioners
    • HITRUST Readiness Assessments based on the HITRUST CSF, including gap reports of controls that must be implemented for certification and recommendations based on industry best practices.
    • HITRUST Validated Assessments to obtain certification.
    • HITRUST Interim Assessments to maintain certification.
    • Security reviews and guidance relative to the HITRUST CSF.
    • Penetration Testing compliant with HITRUST requirements.
    • Application and Vulnerability Scanning compliant with HITRUST requirements.
    • Policy and procedure review and remediation guidance

    Highlights

    • Readiness Assessment: pre-engagement scoping and Q&A sessions to obtain remediation assistance, evaluation of HITRUST Scoping Factors, identification of missing controls, readiness report, readiness test plan with recommendations and gap identification
    • Validated Assessment: pre-engagement scoping and Q&A sessions to provide CSF related guidance, evaluation of HITRUST scoping factors, remote and on-site fieldwork where needed, scoring and validation of all in-scope requirements, compliance attestation
    • Interim Assessment: pre-engagement scoping and Q&A sessions to validate scope, remote and on-site fieldwork where needed, scoring and validation of all in-scope requirements, compliance attestation

    Details

    Delivery method

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Pricing

    Custom pricing options

    Pricing is based on your specific requirements and eligibility. To get a custom quote for your needs, request a private offer.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Support

    Vendor support

    Call or email David Thiele - dthiele@bdo.com  - 713-407-3892

    Software associated with this service