Press & News

In The News

Avalon Healthcare Solutions Achieves HITRUST CSF® Certification to Further Mitigate Risk in Third-Party Privacy, Security, and Compliance

Company Updates

Avalon Health Services LLC DBA Avalon Healthcare Solutions, a leading provider of technology-enabled laboratory benefit management, today announced the APEA (Automated Policy Enforcement Application) andAvalon Portalhosted in Amazon Web Services (AWS) has earned Certified status for information security by HITRUST.

HITRUST CSF Certified status demonstrates that the organizations Lab Science Platform has met key regulations and industry-defined requirements and is appropriately managing risk. This achievement places Avalon Healthcare Solutions in an elite group of organizations worldwide that have earned this certification. By including federal and state regulations, standards, and frameworks, and incorporating a risk-based approach, the HITRUST CSF helps organizations address these challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

Avalon has grown significantly in size and coverage this year by expanding into multiple states. The HITRUST CSF provides us a great tool for us to assess the risk of this growth and incorporate state regulations into our controls seamlessly. This allows Avalon to ensure continuous maturity of our security and privacy programs to meet the complexity of both best practice and regulatory compliance in these areas, saidJesse Webb, SVP Security & Technology, Avalon Healthcare Solutions. We are pleased to demonstrate to our customers the highest standards for protecting sensitive data and information by achieving HITRUST CSF Certification again this year.

In todays ever-changing threat landscape, HITRUST is continually innovating to find new and creative approaches to address challenges, saidJeremy Huval, Chief Innovation Officer, HITRUST. Avalon Healthcare Solutions HITRUST CSF Certification is evidence that they are at the forefront of industry best practices for information risk management and compliance.