For Immediate Release

BlueOrange Achieves HITRUST CSF Assessor Designation


January 22, 2018
Dublin, Ohio
BlueOrange Compliance, a leading Healthcare HIPAA Privacy and Security solutions provider, today announced that it has been designated as a HITRUST CSF Assessor by HITRUST. With this achievement, BlueOrange is now approved to provide services using the HITRUST CSF, a comprehensive security framework that addresses the multitude of security, privacy and regulatory challenges facing organizations in order to comply with healthcare (HIPAA, HITECH), third-party (PCI, COBIT), government (NIST, FTC) and other industry specific regulations and standards.

CSF Assessors are critical to helping uphold information security and privacy standards for various industries of varying size and complexity and are a core component of the HITRUST CSF program by providing trained resources to assess compliance with security control requirements and document corrective action plans that align with the HITRUST CSF. HITRUST CSF Assessors such as BlueOrange serve as a key component of the program by providing assessment and remediation services to all industries that deal with PHI and/or PII.

“HITRUST has been working with the industry to ensure the appropriate information protection requirements are met when sensitive information is accessed or stored in a cloud environment,” said Ken Vander Wal, Chief Compliance Officer of HITRUST. “We are pleased that Blue Orange Compliance has taken the steps necessary to become a designated HITRUST CSF Assessor, and we expect their customers to have confidence in this designation.”

“Blue Orange Compliance is pleased to receive the HITRUST CSF Assessor designation. Health plans are requesting additional clinical information to support payment levels. A HiTrust certification will allow our clients easier access to health plan payment programs. Blue Orange Compliance is excited to help our clients achieve the certification as a continued part of security programs” said John DiMaggio CEO of Blue Orange Compliance.