Rackspace gains certified status for information security from HITRUST

Rackspace has earned Certified status for information security by the Health Information Trust (HITRUST) Alliance for its dedicated environment.

With the HITRUST CSF Certified status, the Rackspace Dedicated environment now meets key healthcare regulations and requirements for protecting and securing sensitive private healthcare information (PHI).

HITRUST CSF Certified status indicates that the Rackspace Dedicated environment has met industry-defined requirements and is appropriately managing risk, and places Rackspace in an elite group of organisations worldwide that have earned this certification.

By including federal and state regulations, standards and frameworks, and incorporating a risk-based approach, the HITRUST CSF helps organisations address these challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

“The HITRUST CSF has become the information protection framework for the healthcare industry, and the CSF Assurance program is bringing a new level of effectiveness and efficiency to third-party assurance,” said Ken Vander Wal, chief compliance officer of HITRUST.

“The CSF Certification is now the benchmark that organisations require to safeguard PHI are measured against with regards to information protection. We are pleased that Rackspace has taken the steps necessary to achieve HITRUST CSF Certified status, and we expect this designation to provide more confidence to its customers.”

HITRUST CSF Certified status applies to the practices, procedures and policies that govern offerings within the Rackspace Dedicated environment including Rackspace Dedicated Servers, storage, databases, networking solutions and managed virtualisation. Leveraging the Rackspace Dedicated environment helps healthcare organisations mitigate the security risk of electronic protected health information (ePHI) and ensure their data is hosted in an IT environment that complies with key controls from several industry standards.

“Medical data is becoming an increasingly attractive target for cyber criminals, so healthcare companies like Central Logic must keep security and compliance top of mind to protect our business and our customers,” said David Meservy, director of IT and security at Central Logic, a healthcare solutions company and Rackspace customer.

“HIPAA compliance alone is no longer enough for healthcare organisations, and we now look to frameworks like HITRUST for stringent, ongoing benchmarks that organisations can follow. By achieving HITRUST CSF Certification, Rackspace has offloaded the complexity of achieving these certifications on our own. This is a true differentiator and a sign of the company’s emphasis on security and support for customers.”