Surescripts Achieves HITRUST CSF® Certification to Manage Risk, Improve Security Posture and Meet Compliance Requirements

HITRUST CSF Certification validates Surescripts is committed to meeting key healthcare regulations and protecting sensitive healthcare information.

Surescripts today announced that its Enhance Prescribing and Inform Care Decisions solutions* have earned Certified status for information security by HITRUST.

HITRUST CSF Certified status demonstrates that key platforms within Surescripts’ Enhance Prescribing and Inform Care Decisions solution structures and their supporting infrastructure* have met key regulations and industry-defined requirements and are appropriately managing risk. This achievement places Surescripts in an elite group of organizations worldwide that have earned this certification. By including federal and state regulations, standards and frameworks, and incorporating a risk-based approach, the HITRUST CSF helps organizations address these challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

Surescripts met more than 300 requirements in pursuit of HITRUST CSF Certified status. These include technical and process elements set forth by HIPAA, ISO, the National Institute of Standards and Technology (NIST) and Control Objectives for Information and Related Technologies (COBIT).

“Surescripts and other healthcare organizations are under great pressure to meet complex regulations,” said Tom Skelton, Chief Executive Officer of Surescripts. “Together with the Surescripts Network Alliance, we hold our responsibility to safeguard customers’ information as a top priority. Our Trust, Quality & Reliability pillars rely on the highest security levels, so we’re pleased to demonstrate our commitment to privacy, security and compliance by achieving the industry’s gold standard, the HITRUST CSF.”

“The HITRUST CSF has become the information protection framework for the healthcare industry, and the HITRUST CSF Assurance program is bringing a new level of effectiveness and efficiency to third-party assurance,” said Ken Vander Wal, Chief Compliance Officer, HITRUST. “The HITRUST CSF Certification is now the benchmark that organizations required to safeguard PHI are measured against with regards to information protection.”

*The following platforms are included in the HITRUST CSF certification: E-Prescribing, Electronic Prescribing of Controlled Substances (EPCS), Electronic Prior Authorization, Real-Time Prescription Benefit, Medication History for Reconciliation, Insights for Medication Adherence and Medication History for Populations.