HIPAA is a regulatory framework enacted in the late 1990s that mandates the protection of electronic health information but provides vague security requirements with significant room for interpretation. HITRUST was developed in response to these challenges, addressing the healthcare industry’s difficulties with HIPAA’s limited prescriptive guidance. This lack of specificity made compliance difficult and created […] The post A guide to HITRUST compliance appeared first on Thoropass.