Censinet Introduces Expansion of Healthcare Vendor Cybersecurity and Risk Management Program at HIMSS Global Health Conference
Post Summary
The BOLD Cybersecurity Transparent program is a collaborative initiative between Censinet and KLAS Research, designed to enhance healthcare cybersecurity by evaluating and recognizing vendors and products for their cybersecurity preparedness. Censinet has expanded the program to include BOLD HICP for healthcare vendors, helping vendors adopt and demonstrate cybersecurity best practices.
HICP (Health Industry Cybersecurity Practices) provides practical, voluntary cybersecurity guidelines tailored for healthcare organizations and vendors. It addresses the top five cybersecurity threats and ten actionable practices to mitigate them. Adopting HICP can reduce fines, shorten audit periods, and mitigate remedies during enforcement actions if demonstrated for at least 12 months.
Censinet is offering customized HICP demonstrations for providers and vendors at the BOLD KLAS Booth (3833) at the Orange County Convention Center in Orlando, FL. Virtual demo requests can also be made via censinet.com/hicp-request.
Vendors rely on their own ecosystem of technology suppliers, creating a cascading flow of BOLD Nth-party risks that must be addressed. Regulations and business associate agreements (BAAs) increasingly require vendors to demonstrate strong cybersecurity practices, such as those outlined in HICP.
Censinet and KLAS will honor eight recipients at the HIMSS22 Global Health Conference, including: • Agfa HealthCare • Arcadia.io • Change Healthcare • EXL Services • Iatric Systems • Qvera • Sectra • STANLEY Healthcare
Visit censinet.com/cybersecurity-transparent for more information and to sign up for the program.
Collaboration with KLAS Research Grows Through Capabilities Demonstrations and Cybersecurity Transparent Vendor Recognition
Boston, MA and Orlando, FL - HIMSS22 Conference – March 15, 2022 – Censinet, the leading provider of risk management solutions for healthcare, today announced further expansion of its Cybersecurity Transparent program with KLAS Research with the introduction of Health Industry Cybersecurity Practices (HICP) for healthcare vendors. Censinet RiskOps™ for HICP for healthcare providers was introduced last week. Censinet has now extended HICP support for vendors with this announcement.
“Healthcare third party vendors, like the providers they support, rely on their own ecosystem technology suppliers, resulting in a cascading flow of Nth-party risk that needs to be addressed,” said Cormac Miller, Censinet President. “As regulations and business associates agreements (BAAs) increase thirty-party liability for vendors, they too must incorporate and demonstrate cybersecurity best practices, for which HICP is designed.”
The publication of the HHS 405(d) Health Industry Cybersecurity Practices (HICP) in 2019 outlined a healthcare-specific approach to cybersecurity. Created in partnership with public and private organizations across the healthcare industry, HICP provides “practical, understandable, implementable, industry-led, and consensus-based voluntary cybersecurity guidelines to cost-effectively reduce cybersecurity risks” for “health care organizations of varying sizes.” To achieve this, HICP focuses on the five most prevalent cybersecurity threats and ten cybersecurity practices that address those threats. Recent laws and regulations, such as the update to the Health Information Technology for Economic and Clinical Health Act (HITECH), instruct OCR to consider implementing these recognized cyber security practices during enforcement actions in the case of breaches. If certain recognized security practices such as HICP can be demonstrated to have been adopted for at least 12 months, it can lead to mitigated fines, early, favorable termination of audits, and mitigated remedies in settlement agreements.
HICP for Healthcare Vendor Debut at HIMSS22 Global Health Conference
Censinet will be available at the KLAS Booth, 3833, at the Orange County Convention Center in Orlando, FL. Censinet will provide customized HICP demonstrations for both providers and vendors. Censinet can also set up HICP demo requests for either the HIMSS Conference or virtually at censinet.com/hicp-request.
Enhancement to the Censinet and KLAS Cybersecurity Transparent Program
With the launch of the Cybersecurity Transparent designation as part of the recently released Best in KLAS 2022 Awards: Software and Services report, more healthcare leaders have access to and insights into the overall preparedness of their vendors and products. This market adoption of this critical program reflects its effectiveness at increasing healthcare cybersecurity safety. Given the growing importance of cybersecurity and risk management in the vendor community, KLAS and Censinet will be presenting enhancements to this successful program for 2022. There will be three presentations at HIMSS22 at KLAS Booth, 3833, and it’s open to all vendors, as well as providers:
- Tuesday, March 15, 2022, at 2:30 PM ET
- Wednesday, March 16, 2022, at 10:30 AM ET
- Thursday, March 17, 2022, at 10:30 AM ET
Censinet and KLAS Recognize Cybersecurity Transparent Leaders at HIMSS22
Censinet and KLAS will recognize 8 Cybersecurity Transparent recipients at the HIMSS22 Global Health and Exhibition Conference in Orlando from March 14-18, 2022. Those recipients include:
To see companies and products that have achieved the Cybersecurity Transparent designation, go to klasresearch.com/censinet.
For more information on the Cybersecurity Transparent program, along with the way to sign up, please visit censinet.com/cybersecurity-transparent.
About Censinet
Censinet, based in Boston, MA, enables healthcare organizations to take the risk out of their business with Censinet RiskOpsTM, the first and only cloud-based exchange that integrates and consolidates enterprise risk management and operations capabilities across critical clinical and business areas. RiskOps builds upon the Company’s foundational success with third-party risk management (TPRM) for healthcare. Censinet transforms healthcare risk by increasing productivity and operational effectiveness while eliminating risks to care delivery, data privacy, and patient safety. Find out more about Censinet and its RiskOps platform at censinet.com.
###
Contacts:
Rob Ciampa
Censinet
(617) 286-6785
rciampa@censinet.com
Twitter: twitter.com/censinet
LinkedIn: linkedin.com/company/censinet
Blog: censinet.com/blog
Key Points:
What is the Cybersecurity Transparent program, and how does it benefit healthcare organizations?
- The Cybersecurity Transparent program, a collaboration between Censinet and KLAS Research, evaluates and recognizes healthcare vendors and products for their cybersecurity preparedness.
- It helps healthcare leaders make informed decisions by providing insights into the security readiness of their vendors.
- By expanding the program to include HICP for vendors, Censinet enables vendors to adopt and demonstrate practical cybersecurity practices, ensuring stronger defenses across the healthcare ecosystem.
What is HICP, and why is it important for healthcare vendors?
- HICP (Health Industry Cybersecurity Practices) was published in 2019 as part of the HHS 405(d) Program, offering voluntary cybersecurity guidelines tailored for healthcare organizations and vendors.
- It focuses on addressing the top five cybersecurity threats through ten best practices to mitigate risks.
- Vendors who adopt HICP for at least 12 months can benefit from regulatory advantages, such as:
- Reduced fines.
- Early termination of audits.
- Mitigated remedies during enforcement actions.
- HICP also helps vendors ensure compliance with business associate agreements (BAAs) and strengthen their overall cyber posture.
How is Censinet showcasing HICP at the HIMSS22 Global Health Conference?
- Censinet is offering customized HICP demonstrations for both healthcare providers and vendors at the KLAS Booth (3833) in the Orange County Convention Center in Orlando, FL.
- The demonstrations highlight how HICP workflows and best practices can protect against cybersecurity threats and enhance compliance.
- Vendors and providers can request virtual demonstrations after the conference at censinet.com/hicp-request.
What role does Censinet RiskOps™ play in supporting HICP?
- Censinet RiskOps™ automates HICP implementation for both providers and vendors, streamlining workflows, compliance, and reporting.
- It addresses critical areas such as:
- Third-party and Nth-party risk management.
- Vendor cybersecurity preparedness.
- Supply chain security and medical device protection.
- The platform helps healthcare organizations adopt recognized cybersecurity practices while reducing administrative burdens.
Why is vendor cybersecurity critical in today’s healthcare landscape?
- Vendors often rely on their own ecosystem of technology suppliers, creating a cascading flow of Nth-party risks that can impact patient safety and care delivery.
- Increasing regulations and business associate agreements (BAAs) require vendors to demonstrate strong cybersecurity practices.
- Adopting standards like HICP helps vendors comply with these requirements and reduce risks to their clients.
What enhancements are being introduced to the Cybersecurity Transparent program in 2022?
- As part of the Best in KLAS 2022 Awards, the Cybersecurity Transparent program has grown in adoption, giving healthcare leaders greater insights into vendor preparedness.
- Censinet and KLAS are presenting new enhancements to the program at HIMSS22, further increasing its effectiveness at improving healthcare cybersecurity.
- Presentations on the program’s updates will take place at the KLAS Booth (3833):
- Tuesday, March 15, 2022, at 2:30 PM ET.
- Wednesday, March 16, 2022, at 10:30 AM ET.
- Thursday, March 17, 2022, at 10:30 AM ET.
Who are the Cybersecurity Transparent recipients being recognized at HIMSS22?
- Censinet and KLAS will honor eight recipients at the HIMSS22 Global Health Conference for their achievements in cybersecurity transparency:
- Agfa HealthCare
- Arcadia.io
- Change Healthcare
- EXL Services
- Iatric Systems
- Qvera
- Sectra
- STANLEY Healthcare
- For a full list of Cybersecurity Transparent companies and products, visit klasresearch.com/censinet.
How can vendors and providers join or learn more about the Cybersecurity Transparent program?
- Vendors and providers can learn more about the program and sign up by visiting censinet.com/cybersecurity-transparent.
- The program offers vendors a way to showcase their cybersecurity preparedness and provides healthcare organizations with greater visibility into vendor risks.
