mail@gemini-theme.com
+ 001 0231 123 32
All demo content is for sample purposes only, intended to represent a live site. Please use the RocketLauncher to install an equivalent of the demo, all images will be replaced with sample images.
NDB is North America’s leading provider of SOC 2 HITRUST readiness assessments, along with subsequent SOC 2 HITRUST Type 1 and SOC 2 HITRUST Type 2 reports. With more and more healthcare organizations handling large amounts of highly sensitive patient data – commonly known as Personally Identifiable Information (PII)/Protected Health Information (PHI) – the need for increased security measures are now more important than ever. And the most commonly used prescriptive third-party assessment for validating healthcare controls is none other than a SOC 2 HITRUST report. Yet before such a report can be issued – and even before the audit can be conducted – healthcare service organizations would highly benefit from a fixed-fee SOC 2 HITRUST scoping & readiness assessment from a nationally recognized IR CPA firm, and that’s NDB.
As one of North America’s leading providers of regulatory compliance services and solutions, NDB Has developed a highly efficient SOC 2 HITRUST auditing process from beginning to end, one that saves your organization both time and money. What’s interesting to note about HITRUST compliance is that the AICPA – in conjunction with HITRUST – has put forward a mapping document that essentially “maps” the HITRUST CSF controls to the AICPA TSP Common Criteria. The most recent mapping unfortunately becomes outdated relatively quickly as HITRUST changes their CSF quite frequently. Regardless, the overall intent is quite clear, leaving most organizations with the impression that much work has to be done (and rightfully so) for becoming SOC 2 HITRUST compliant.
We offer a proven methodology for helping healthcare companies become SOC 2 HITRUST compliant, which includes the following steps:
Begin with a SOC 2 HITRUST Readiness Assessment: You need to know and understand the specific scoping issues surrounding SOC 2 HITRUST compliance. Do you have adequate documentation in place? Are your technical controls measuring up to the HITRUST standards? We’ll cover these issues, and many more, during the readiness assessment activities.
Technical Remediation: Securing your assets, and highly confidential patient/consumer data (i.e., Personally Identifiable Information (PII)/Protected Health Information (PHI) ultimately requires the use of various software tools and solutions. But with so many vendors offering products and services, which one’s are the right fit? NDB has years of experience working with a wide-range of vendors, giving us the expertise in helping find the right product at the right price for your business. When it comes to SOC 2 HITRUSTS, count on NDB.
Operational Remediation: Does your organization perform annual activities that are a requirement for HITRUST compliance, such as security awareness training, risk assessments, and more? If not, now’s the time to start getting compliant, and we can assist. NDB has helped hundreds of healthcare companies in implementing various operational controls and practices for both HITRUST and HIPAA compliance, so contact us today to learn more. If it’s SOC 2 HITRUST you need assistance with, then you’ve found the right firm. Please contact Chris Nickell, CPA, at This email address is being protected from spambots. You need JavaScript enabled to view it., or call him at 1-800-277-5415, ext. 706 to learn more about SOC 2 HITRUST reporting.
SOC 2 HITRUST Type 1 Audits: Upon successfully completing all technical and operational remediation activities, healthcare organizations generally begin with a SOC 2 Type 1 HITRUST report. This is because a Type 1 report is a “point in time”, such as June 1, 20xx. It essentially allows organizations to illustrate a minimum baseline compliance for HITRUST - and other related controls - as their processes and procedures are “in place” as of a specific date. This ultimately allows organizations to prepare for a SOC 2 Type 2 HITRUST audit in which controls are assessed and validated over a “period of time”, usually six (6) months. Going from a HITRUST readiness assessment, performing remediation, then a Type 1, and finally a Type 2 audit, are the logical steps to take. Please contact Chris Nickell, CPA, at This email address is being protected from spambots. You need JavaScript enabled to view it., or call him at 1-800-277-5415, ext. 706 to learn more about SOC 2 HITRUST reporting.
SOC 2 HITRUST Type 2 Audits: As just discussed, most healthcare organizations will ultimately aim for annual SOC 2 Type 2 HITRUST reporting after they’ve successfully performed all other preceding phases (i.e., HITRUST readiness assessment, HITRUST remediation, and a SOC 2 Type 1 HITRUST report).
Ready to begin the HITRUST reporting process, then contact Chris Nickell, CPA, at This email address is being protected from spambots. You need JavaScript enabled to view it., or call him at 1-800-277-5415, ext. 706 to learn more about SOC 2 HITRUST reporting from NDB. As a national leader in the healthcare industry, you can trust NDB for all your SOC 2 HITRUST reporting needs.
Follow