Achieving HITRUST on a Budget

Presented at BSidesSF 2022 Rescheduled, June 5, 2022, 11:10 a.m. (50 minutes).

HITRUST is the most-sought certification by healthcare organizations but the resources and time required are daunting. On average, the HITRUST certification costs >$300K+ and 22 months. Ginger took a different approach and passed the HITRUST assessment in less than $100K and 11 months.

Presenters:

• Shobhit Mehta - Ginger (Headspace Health)
  Shobhit is a Security & Compliance Lead at Ginger (Headspace Health), an on-demand mental-health company in San Francisco, CA. Prior to Ginger, he worked for 10+ years in different facets of Governance, Risk, & Compliance with companies like HSBC, Deutsche Bank, Credit Suisse, PayPal, & Fidelity Investments to build and mature their security and compliance programs. He also works with ISACA to develop the exam questions for flagship certifications such as CISA, CISM, CGEIT, is a published author for ISACA's COBIT 5 journal, and regularly presents in industry conferences such as (ISC)2 Security Congress. He blogs on GRCMusings.com to deconstruct the jargons related to GRC and Healthcare. Shobhit completed his MS in Cybersecurity from Northeastern University, Boston, & holds CISSP, CISA, CISM, CRISC, CGEIT, HITRUST CCSFP, ISO 27001 LA, and ITIL certifications.

Links:

• https://bsidessf2022.sched.com/event/rjqu/achieving-hitrust-on-a-budget

Similar Presentations:

• AppSec USA 2016 / Should there be an Underwriters Laboratories certification for software in IoT products?
• Black Hat USA 1999 / Overview of Certification Systems: x.509, CA, PGP and SKIP.