Welcome!

Microservices Expo Authors: Jason Bloomberg, Elizabeth White, Pat Romanski, Zakia Bouachraoui, Liz McMillan

Related Topics: @CloudExpo, Java IoT, Microservices Expo, Containers Expo Blog, Agile Computing, Cloud Security

@CloudExpo: Article

Coalfire Launches Online Exchange for HIPAA Compliance and Risk Management

HIPAAcentral simplifies vendor management, increases compliance management efficiencies & reduces costs for healthcare industry

Coalfire has launched HIPAAcentral, a new compliance exchange that provides a comprehensive suite of services for covered entities and business associates and their subcontractors to manage, maintain and exchange healthcare regulatory compliance data.

"The U.S. Department of Health and Human Services is now actively monitoring and enforcing the HIPAA Omnibus Rule, and too many healthcare firms aren't prepared," said Rick Dakin, CEO and co-founder of Coalfire. "HIPAAcentral is closing that gap by enabling subscribers to securely exchange and verify compliance status."

HIPAAcentral simplifies compliance management by providing vendor risk management tools, training, templates, and third-party validation services, plus an online compliance registry and knowledge exchange. The service, which is available by subscription to both covered entities (CEs) and business associates (BAs), utilizes standardized criteria for compliance validation and actively monitors vendor compliance via automated notifications, workflow management and expert support.

As of Sept. 23, 2013, all covered entities, business associates and their subcontractors were required to be in compliance with the HIPAA Omnibus Rule, and are now facing increased financial and criminal penalties for non-compliance. A survey conducted by Coalfire in September found that a majority of business associates reported being somewhat or completely unaware of their new responsibilities under the Omnibus Rule, and fewer than half of business associates reported being compliant.

The HIPAAcentral platform was developed with input from both the covered entity and business associate communities, and provides a secure, business-to-business network with access to training, templates, white papers, alerts and other resources to track the complex and constantly changing security and compliance landscape. The platform is based on industry frameworks such as NIST 800-66, and the Office of Civil Rights (OCR) audit protocol to meet the requirements of the HIPAA Security Rule, as well as the IT security-related requirements of the HITECH and the Omnibus Rule.

"The HIPAAcentral platform provides a game-changing solution for the healthcare industry, combining expert GRC capabilities, industry resources, education, and a community, business-to-business network," continued Dakin. "HIPAAcentral dramatically reduces the risks and barriers to compliance and provides a simplified path to security and compliance with increased efficiencies and decreased costs."

HIPAAcentral also provides for easy access to a full complement of Coalfire and third-party GRC services to meet security and compliance needs, and registered users are eligible to receive a discount for a Coalfire compliance assessment.

Learn more about HIPAAcentral by visiting www.hipaacentral.com.

Coalfire is a recognized leader in IT compliance with more than 4,000 assessments, including hundreds for healthcare-related organizations. Coalfire's expertise in HIPAA/HITECH compliance extends beyond healthcare providers to include associated financial institutions and service providers that fall under the newly implemented regulations as part of the current healthcare reform.

More Stories By Pat Romanski

News Desk compiles and publishes breaking news stories, press releases and latest news articles as they happen.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Microservices Articles
Two apparently distinct movements are in the process of disrupting the world of enterprise application development: DevOps and Low-Code. DevOps is a cultural and organizational shift that empowers enterprise software teams to deliver better software quicker – in particular, hand-coded software. Low-Code platforms, in contrast, provide a technology platform and visual tooling that empower enterprise software teams to deliver better software quicker -- with little or no hand-coding required. ...
"We do one of the best file systems in the world. We learned how to deal with Big Data many years ago and we implemented this knowledge into our software," explained Jakub Ratajczak, Business Development Manager at MooseFS, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
All zSystem customers have a significant new business opportunity to extend their reach to new customers and markets with new applications and services, and to improve the experience of existing customers. This can be achieved by exposing existing z assets (which have been developed over time) as APIs for accessing Systems of Record, while leveraging mobile and cloud capabilities with new Systems of Engagement applications. In this session, we will explore business drivers with new Node.js apps ...
Using new techniques of information modeling, indexing, and processing, new cloud-based systems can support cloud-based workloads previously not possible for high-throughput insurance, banking, and case-based applications. In his session at 18th Cloud Expo, John Newton, CTO, Founder and Chairman of Alfresco, described how to scale cloud-based content management repositories to store, manage, and retrieve billions of documents and related information with fast and linear scalability. He addres...
While some developers care passionately about how data centers and clouds are architected, for most, it is only the end result that matters. To the majority of companies, technology exists to solve a business problem, and only delivers value when it is solving that problem. 2017 brings the mainstream adoption of containers for production workloads. In his session at 21st Cloud Expo, Ben McCormack, VP of Operations at Evernote, discussed how data centers of the future will be managed, how the p...
Digital Transformation is well underway with many applications already on the cloud utilizing agile and devops methodologies. Unfortunately, application security has been an afterthought and data breaches have become a daily occurrence. Security is not one individual or one's team responsibility. Raphael Reich will introduce you to DevSecOps concepts and outline how to seamlessly interweave security principles across your software development lifecycle and application lifecycle management. With ...
Containers and Kubernetes allow for code portability across on-premise VMs, bare metal, or multiple cloud provider environments. Yet, despite this portability promise, developers may include configuration and application definitions that constrain or even eliminate application portability. In this session we'll describe best practices for "configuration as code" in a Kubernetes environment. We will demonstrate how a properly constructed containerized app can be deployed to both Amazon and Azure ...
The now mainstream platform changes stemming from the first Internet boom brought many changes but didn’t really change the basic relationship between servers and the applications running on them. In fact, that was sort of the point. In his session at 18th Cloud Expo, Gordon Haff, senior cloud strategy marketing and evangelism manager at Red Hat, will discuss how today’s workloads require a new model and a new platform for development and execution. The platform must handle a wide range of rec...
More and more companies are looking to microservices as an architectural pattern for breaking apart applications into more manageable pieces so that agile teams can deliver new features quicker and more effectively. What this pattern has done more than anything to date is spark organizational transformations, setting the foundation for future application development. In practice, however, there are a number of considerations to make that go beyond simply “build, ship, and run,” which changes how...
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.