Back to Basics: What is HITRUST?

A-LIGN’s HITRUST Assessors are often asked: What is HITRUST and why do I need it? As healthcare organizations face stricter regulatory needs in light of an increase in healthcare-related breaches, many organizations are considering HITRUST as an option for risk management and mitigation. What is HITRUST? HITRUST, or the Health …

Read More

Holding Your Security Ransom: Preparing Your Organization for Ransomware Attacks

Today’s ransom trend Today, ransomware virus cases are becoming more frequent than ever as they are raking in, on average, $450 billion dollars into the cybercriminal market annually. These unpleasant viruses leave users desperate, pressuring them into thinking that they have no choice but to pay ridiculous amounts of bitcoins …

Read More

Which HITRUST Assessment Scope Is Right for My Organization?

Which HITRUST Assesment Scope is Right for My Organization? There are 14 different control categories, each with their own number of objectives and requirements. These include the following: Information Security Management Program Access Control Human Resources Security Risk Management Security Policy Organization of Information Security Compliance Asset Management Physical …

Read More

SOC 2: 2016 Updates and the Privacy Principle Integration

Overview of Privacy Principle and SOC 2 Updates In order to clarify and eliminate redundancy within the requirements of the trust services criteria for privacy, changes have been made to the SOC 2 privacy principle guidelines. While most of these changes are clarification-based, the addition of privacy to the common …

Read More

Get Ready: Changes to ALTA’s Best Practices and Assessment Procedures

Overview of ALTA Best Practices Changes In June 2016, the ALTA Board approved the modifications to the ALTA Best Practices and assessment procedures, and also created the Best Practices Maturity Model to help Title Companies measure compliance with the Best Practices. Below is a brief summary of the changes that …

Read More

Ask A-LIGN’s Experienced Assessors: HITRUST

Because of the unique challenges facing the healthcare industry, companies are considering their options to mitigate and manage their risk. HITRUST offers a framework that allows for consistent implementation of the HIPAA requirements, but generates many questions that need to be answered. Below are a few frequently asked questions that …

Read More

6th Annual Leaders’ Friday Luncheon Reception

A-LIGN Managing Partner, Scott Price, recently attended the 6th Annual Leaders’ Friday Luncheon Reception. Price, one of the co-founders of Leaders’ Friday Luncheon, helped create the program in 2010 to promote a casual setting for young business and community leaders to enjoy an informal lunch. This allows Tampa Bay business …

Read More

Revision in MasterCard’s Cardholder Obligations: Does It Affect You?

MasterCard has revised its Standards to allow for collection agents to accept signature debit cards in the US. This revision is effective immediately and will be reflected in upcoming versions of MasterCard Rules. This change does not affect MasterCard’s credit transaction rules, and those transactions will remain prohibited as …

Read More

Introducing APEX: A-LIGN’s ALTA Best Practices Examination

A-LIGN, a nationwide security and compliance solutions firms, has recently renamed its existing ALTA Best Practices Examination to APEX Best Practices. As an American Land Title Association (ALTA) Elite Provider, A-LIGN is dedicated to being an ally to those in the real estate, title, and loan processing …

Read More

What to Expect from PCI DSS 3.2

Earlier this year, we wrote about how to prepare for PCI DSS 3.2. Now, organizations should begin to implement changes with the PCI DSS 3.2 official release. These standards should be adopted as soon as is possible, as version 3.1 will expire on October 31, …

Read More