Paubox Is Now Part of the HITRUST Inheritance Program

Paubox has recently been accepted into the HITRUST Shared Responsibility and Inheritance Program. We've shown over the past few years how meaningful HITRUST CSF certification is for any organization, and how it can help healthcare organizations in particular. We were excited to first achieve HITRUST CSF certification in 2019, and we are especially proud to have expanded and renewed our certification through 2023, strengthening our commitment to safeguarding the information of our customers and their patients. And now, our customers can further benefit from Paubox's HITRUST CSF certification via the HITRUST inheritance program.

The HITRUST inheritance program

All business associates and covered entities have to meet their own set of regulatory and compliance requirements, which include reviewing, implementing, testing and auditing various security controls. Not every organization, however, has the time or resources to commit to securing HITRUST CSF certification. The HITRUST Shared Responsibility and Inheritance Program bridges the gap between organizations and their cloud services providers, providing a common model for security and privacy and clearly delineating ownership, responsibility, and risk between both parties. More importantly, it allows an organization to benefit from a vendor's HITRUST CSF certification by setting up "control inheritance." This means that since Paubox is a part of the inheritance program, you can include some of our security controls in your own organization's assessments and audits. This "assess once, inherit many" approach saves time, effort, and expense, and also provides access to testing results that may not have otherwise been available. Key to the program is a baseline template that includes 2,000 detailed security and privacy control requirements that are mapped to the most common global regulatory and compliance frameworks, pre-populated with shared responsibility and inheritance details for cloud service providers.

Paubox and HITRUST inheritance

• Streamlined collection of detailed information about Paubox's compliance controls
• Eliminating the manual hand-off of third-party assurance reports
• Reducing duplicative assessment testing and data entry

HITRUST makes a number of resources available to organizations looking to incorporate (i.e. inherit) a vendor's security measures into its own security program. When you're ready to initiate an inheritance request, visit HITRUST's MyCSF User Guide.

SEE ALSO: How to Take Advantage of the HITRUST Shared Responsibility and Inheritance Program