Third-Party Validation—Your Strategic Advantage

Obtaining third-party validation through testing and certification offers a multitude of benefits to your organization. By partnering with a trusted authority in health IT, commerce, and cybersecurity compliance, you gain
6 Reasons to Conduct a Comprehensive Healthcare Risk Assessment (CHRA)

AUTHOR: Samuel Hinson, Drummond Leader for Cybersecurity Services The healthcare industry has long been a target for cyberattacks due to patient data’s sensitive and valuable nature; there have been numerous
Penetration Testing vs. Vulnerability Scanning: Understanding The Difference and Assessing Your Needs

AUTHOR: Samuel Hinson, Drummond Leader for Cybersecurity Services Penetration testing (also known as pentesting) and vulnerability scanning share many similarities, often resulting in IT professionals being unsure of which service
The Time Is NOW for EHR Pediatric Certification

Timothy Bennett, Director of Strategic Healthcare Initiatives, and Yoko Nakagawa, Business Development and Program Manager, have worked together at Drummond Group to help bring much-needed change and improvement to Pediatric Electronic Health Records (EHRs). In a recent LinkedIn Live, they were joined by Pele Yu, MD, Chief Medical Information Officer from Arkansas Children’s Hospital to share what inspired them to begin the journey towards making pediatric EHR certification a reality.
How to Ensure HIPAA Policies and Procedures Are Enforceable

HIPAA Compliance Best Practices On-Demand Webinar. All stakeholders (payers, providers, and software developers) who use, record, access, or store patient data have a duty to protect the privacy, security, and integrity of that protected health information. HIPAA compliance is a critical step toward ensuring sensitive data is secure
How to Choose the Best Health IT Testing and Certification Partner

Leading Global Organizations Participate in Security, Interoperability Test Event
The DEA Final Rule: Achieving or Maintaining Compliance While Expecting Change
With the fight against prescription drug abuse remaining a priority in the United States; DEA’s Electronic Prescriptions for Controlled Substances (EPCS) regulations governing e-prescribing of controlled substances play a key
Health IT Data Accessibility Best Practices to Avoid Information Blocking Scrutiny

In this blog post, John Valutkevich discusses the increased requirements and enforcement of data access capabilities as well as information blocking prevention best practices to meet compliance standards of (g)(10) standardized API and the (b)(10) bulk export capability.
The Top 5 Common DEA EPCS Compliance Mistakes Health IT Companies Make

Healthcare is a highly regulated industry, and ensuring compliance with regulations and laws is essential for any Health IT company. One of the most critical areas of compliance is the