Healthcare Industry and Business Leaders Advancing Health Information Security

The Health Information Trust Alliance or HITRUST (http://www.hitrustalliance.org) is an independent organization working with leaders and leading organizations in healthcare, business, technology and information security to help advance the quality improvement and cost effectiveness of the protection of electronic information within the healthcare system in the United States.

In working towards this goal, HITRUST is currently developing a Common Security Framework (CSF) Program to enable healthcare related organizations to gain better understanding and adoption of the various industry regulations and international standards for information security such as:  ISO 27001, ISO 27002, PCI DSS, CoBIT, HIPAA, and others.

"The HITRUST Common Security Framework Program, through the collaboration of HITRUST and organizations that represent the full spectrum of the healthcare, professional services, information technology, information systems and information security, is establishing the HITRUST Common Security Framework (CSF), a comprehensive, certifiable set of tools to aid organizations in protecting their information assets and managing related risks, costs and complexities." (http://www.hitrustalliance.org/programs/)

As a former CISO in the healthcare industry with an understanding of the challenges faced by healthcare organizations I welcome the efforts of HITRUST.