HITRUST

    Risks to your organisation data are dynamic. In the face of ever evolving threats, discover how we turn challenges to triumphs
    HiTrust

    In today's ever-changing security landscape, there is an increasing scrutiny from regulators, bigger penalties, and ever-increasing security and privacy concerns. The challenges faced by the organisations may vary from increasing precision of computer abuse and computer cybercrime, inconsistent business partner requirements and compliance expectations, gaining the assurances needed to allow organisations to safely engage with their customers and trading partners, and inefficient internal compliance management processes. Our HITRUST assurance programme will provide insights to build a proactive approach for covered entities and their business associates for data protection and security risk mitigation.

    Your journey to security starts with our HITRUST expertise

    As a HITRUST external assessor, KPMG in India is offering HITRUST assurance programme which provides organisations with a coordinated approach. This approach ensures all programmes related to security and privacy are aligned, maintained, and thorough to support an organisation’s risk management and compliance objectives. It acts as a central gatekeeper which takes into consideration internationally recognised security standards like NIST, HIPAA, FTC, PCI DSS, COBIT, Red Flags, ISO, and GDPR

    Roadmap for HITRUST Journey

    Setting expectations, Defining the scope, & Educating stakeholders 

    Readiness Assessment 
     

    Redemption support
     

    Self Assessment (if need be)
     

    Performing Validated Assessment 
     

    HITRUST QA Support,
    HITRUST Certificate

    The objective of our HITRUST Assurance Program is to establish a holistic approach for the organisations to manage information security risk

    Rising momentum of data intelligence. Big data and Ai core data concept image.  Dark and light metallic blue block stacked and rising. Shallow depth  of field. 3D illustration, 3D rendering.

    Assessment options to meet every level of assurance

    Assessment options to meet every level of assurance

    HITRUST certification caters to varying levels of budget, resources, and risk profile of an organisation

      • HITRUST Risk-based, 2-Year (r2) Validated Assessment + Certification

        A high level of assurance that focuses on a comprehensive risk-based specification of controls with an expanded approach to risk management and compliance evaluation

      • HITRUST Implemented, 1-Year (i1) Validated Assessment + Certification

        Provides a moderate level of assurance that addresses cybersecurity leading practices and a broader range of active cyber threats compared to e1 Assessment

         

      • HITRUST Essentials, 1-Year (e1) Validated Assessment + Certification

        Provides entry-level assurance focusing on critical information security controls and demonstrates that essential cybersecurity hygiene is in place

      Applicability of our HITRUST Assurance Programme

      Companies that access, create, transmit or store sensitive health information of US-based customers

      Companies concerned about the HIPAA law and penalties being levied by US regulators and 

      Service providers already providing or intending to provide any of the following services to US-based healthcare service providers such as:

      • Back-office support
      • Software development, host or support services
      • Transmission of health data
      • Business support to medical tourism/life insurance providers and
      • Support to US healthcare federal agencies such as CMS and FISMA.

      KPMG in India, A trusted and certified HITRUST external assessor

      • Accredited and Authorized

        KPMG being a certified HITRUST external assessor is authorized by the HITRUST Alliance to perform readiness, remediation and assessment work for certification using the HITRUST CSF. In addition, KPMG is on the AICPA task force which enables it to map the responsibility of the HITRUST CSF into the SOC 2+HITRUST reporting

      • Efficient Approach and Methodology

        KPMG can assist you with the adoption of the HITRUST CSF as the foundation of your security and privacy compliance program based on its cross functional approach and methodology in line with global practices

      • Continuous Support and Guidance

        KPMG guides and advice clients throughout the HITRUST certification journey (scoping exercise, self assessment and validated assessment) and assists them in responding to HITRUST QA and certification queries

      • Deep Expertise

        As a certified HITRUST assessor, we have a pool of experienced certified HITRUST CSF practitioners who deliver engagements for clients across various sectors

      KPMG in India HITRUST Service Offerings

      Explore the advantages of our HITRUST Assurance program

      A comprehensive program delivering unparallel benefits from risk mitigation to a strengthened security posture

      • Outlines organisations’ information risk management and compliance objectives
      • Helps mitigate cyber-related risks, through thorough controls and consistent approach to assessment
      • Reduces cost and provides a unified approach for managing data protection compliance
      • Evolves according to user input and changing conditions in the standards and regulatory environment at least on an annual basis
      • Rationalizes relevant regulations and standards into a single overarching security framework.

      Essence of HITRUST Certification is “Assess once and report many” thus saves time for multiple compliance

      Essence of HITRUST Certification is “Assess once and report many” thus saves time for multiple compliance

      KPMG in India's HITRUST Assurance Programme

      Elevate your security and compliance with KPMG in India's HITRUST Assurance services

      Our HITRUST service offerings now includes AI risk management and AI risk assessment to enable organisation in safeguarding their data and AI systems

       


      Key Contacts

      Sundar Ramaswamy

      National Co-Head - Cyber Assurance

      KPMG in India

      Rahul Singhal

      National Co-Head - Cyber Assurance

      KPMG in India

      M N Gururaja

      Partner, Digital Trust, Advisory

      KPMG in India


      Connect with us

      Contact our specialists for more information

      connect with us