SCP
This individual from Privacy serves on the SCP Committee
Who is Deb Beaver?
The length of time that HITRUST certifications are good for
What is Two years?
This SOC report is used for Marketing purposes.
What is a SOC 3?
Covered entities must comply with this federal law to protect patient health information.
What is HIPAA (Health Insurance Portability and Accountability Act)?
This process preceded our current review process.
What is ARB?
Geisinger is currently transitioning to this framework
What is ITIL 4?
This group is responsible for Complementary User Entity Controls
Who is the user entity?
These are the three types of organizations classified as covered entities under HIPAA.
What are healthcare providers, health plans, and healthcare clearinghouses?
Carla has visited all of the lower 48 states except this state.
What is Oklahoma?
HITRUST controls are defined by this group
Who is the HITRUST Alliance?
Strategic, tactical and operational approach to managing information technology within the organziation and delivering services to customers.
What is IT Service Management (ITSM)
Some organizations, like universities, may be designated as this type of entity under HIPAA, meaning only their healthcare components are subject to HIPAA regulations.
What is a hybrid entity?
This company will be replacing CORL in 2026
Who is Deloitte?
The period of time it takes to become HITRUST certified.
What is 13 months?
These IT Compliance team members serve on SMO.
Who is Carla, Nicole, Carin, Jill & Kelly
SOC 2 reports are specifically designed for service providers that store or process this type of client data.
What is sensitive or confidential information?