Health data is under attack. Unfortunately, we see a seemingly steady stream of health care data security breaches. Is your data as safe as you think it is? HIPAA compliance just isn’t enough. Go farther. If your provider of health data services, your electronic health record (EHR) provider, your SaaS vendor or your population health management partner hasn’t submitted to the rigors of a AICPA SOC 2 Type II audit, your data is at risk.
Forward Health Group is one of the few health IT companies to have successfully completed a SOC 2 Type II audit, showing us compliant in the areas of security, dealing with confidential information, and the processing integrity of customer data. This type of audit is internationally recognized as a way to show that an organization meets stringent standards for IT and business systems.
Jeff Thomas, Forward Health Group Chief Technology Officer said, “A SOC 2 Type II audit is a very rigorous process, and we’re very proud to have come through it successfully. This shows Forward Health Group’s ability to provide our population health management data services while adhering to strict industry best practices in a secure manner. Our clients are the real winners.”
What is SOC 2? The SOC 2 is a set of standardized control objectives on five key system attributes defined by the American Institute of CPAs (AICPA) Trust Services Principles and Conditions. The SOC 2 Type II audit is recognized worldwide as one of the most strict audit standards for service providers. The audit is comprehensive and ensures that the service provider (in this case, FHG) has all requisite controls in place and follows the processes meticulously every time. FHG has demonstrated that our services meet and exceed the industry’s accepted standard of governing controls and protection of all processed data on behalf of our clients.
Forward Health Group clients can be assured that their data is safe, protected and accurate.
Security, confidentiality, integrity. peace of mind. Forward Health Group has secured SOC 2 Type II compliance. Audited by CliftonLarsonAllen LLP.