Case Study: a public healthcare system improves cybersecurity risk posture with Coalfire

a public healthcare system improves cybersecurity risk posture in 3 years with Coalfire

A major public health system faced an Office for Civil Rights (OCR) inquiry requiring a sufficient enterprise-wide HIPAA risk analysis and risk management plan. Their previous assessment was deemed insufficient, so they engaged Coalfire for its Cyber Risk Advisory and Compliance services to meet the regulatory requirements and improve their cybersecurity posture.

Coalfire implemented a comprehensive solution using an OCR audit protocol and a mock-audit approach. This included conducting a risk analysis, penetration testing, and creating a formal risk register and management plan. As a result, the health system remedied critical risks, improved its compliance processes, and established better coordination between departments. Coalfire's approach provided a high value-to-cost ratio, enabling the organization to demonstrate its commitment to HIPAA compliance to the OCR.

Healthcare Company Infrastructure