HIPAA and HITRUST assessments, by certified assessors.
Protecting PHI isn't optional, and neither is proving it. SubRosa's certified HIPAA and HITRUST assessors evaluate your administrative, physical, and technical safeguards, run the risk assessment the law requires, and guide you to HITRUST CSF certification, with the templates, project management, and turnaround to get there without derailing your team.
HIPAA Security Rule · HITRUST CSF · Risk assessment · Certification support
What's the difference between HIPAA and HITRUST?
HIPAA is the U.S. law requiring healthcare organizations and their business associates to protect electronic protected health information (ePHI), including a mandatory Security Risk Assessment of administrative, physical, and technical safeguards. HITRUST CSF is a certifiable framework that maps HIPAA and other standards into prescriptive, testable controls, so you can prove your security with an independent certification. SubRosa's certified assessors handle both: the HIPAA risk assessment the law requires, and the HITRUST certification the market increasingly expects.
A complete healthcare compliance assessment.
We evaluate every critical area of your HIPAA and HITRUST program, end to end.
HIPAA Security Risk Assessment
The risk analysis the HIPAA Security Rule requires (45 CFR §164.308), administrative, physical, and technical safeguards, scored with a clear Plan of Action and Milestones (POA&M).
HITRUST CSF readiness & certification
Readiness assessments, mock assessments, and full support through HITRUST CSF certification, using optimized templates that cut your time to certification.
Control & safeguard assessment
Hands-on evaluation of the controls protecting your ePHI against HIPAA, HITRUST, and DHHS requirements, by assessors who do this every day.
Policies, training & ongoing support
Policy development, leadership and workforce training, and ongoing support, so compliance sticks long after the assessment is done.
Certified assessors, faster certification.
Certified HIPAA & HITRUST assessors
Certified assessors on staff guide you through the HIPAA risk assessment and the HITRUST certification process, so you're working with people who've done it many times over.
Optimized templates
Our optimized HIPAA and HITRUST policy and control templates cut preparation time and shorten your path to certification.
Full project management
We manage the assessment end to end, POA&M tracking, evidence, and timelines, so nothing falls through the cracks and your team keeps doing its job.
HIPAA and HITRUST controls, evidenced continuously.
Sable maps your safeguards to the HIPAA Security Rule and HITRUST CSF, tracks your POA&M, and collects evidence continuously, so your next assessment is an export, not a fire drill, and you stay compliant between certifications.
- 18 / 18Administrative safeguardsComplete
- 9 / 9Physical safeguardsComplete
- 11 / 13Technical safeguards2 POA&M
- 6 / 7Organizational requirements1 POA&M
Protect PHI, and prove it.
Let's scope your HIPAA risk assessment or HITRUST certification and map the fastest path to compliance.