HITRUST RightStart: Eating HITRUST controls for breakfast

HITRUST Fatigue got me again last night. While the team we assembled to tackle HITRUST put in work last night from home, I knocked out on the couch with my screen in front of me. I'm back at it early today, rested and feeling motivated to catch up to my teammates.

#HITRUSTFatigue means typos galore With Tyler "Commish" Dornenburg at the DMV for an appointment, we put in a final unified push today from both the Oakland DMV and the office. As our Director of Engineering, Jonathan "BBQ" Greeley said this morning, "We're eating HITRUST controls for breakfast."

Working six days a week and at all hours to kick off 2019 is a part of our journey along the HITRUST RightStart program. This post is another behind the scenes (BTS) look at a startup on the verge of submitting a legit HITRUST assessment.

"Eating HITRUST Controls for Breakfast"

Commish, Jonathan "BBQ" Greeley and I huddled around a small table to strategize on HITRUST controls and progress. Here's what we covered during our meeting:

• Section 6 - Configuration Management
• Delegation of work on remaining HITRUST controls

Here's what I worked on to help stamp out our HITRUST Assessment:

• Section 11 - Access Control
• Section 7 - Vulnerability Management
• Section 9 - Transmission Protection
• Section 6 - Configuration Management

It's 4:35pm and we finished our HITRUST assessment a day early. On tap for tomorrow: Workforce training and formal submission. Now to get some rest.

HITRUST

Founded in 2007, HITRUST Alliance is a not-for-profit organization whose mission is to champion programs that safeguard sensitive information and manage information risk for organizations across all industries and throughout the third-party supply chain. In collaboration with privacy, information security and risk management leaders from both the public and private sectors, HITRUST develops, maintains and provides broad access to its widely adopted common risk and compliance management and de-identification frameworks; related assessment and assurance methodologies; and initiatives advancing cyber sharing, analysis, and resilience.