System and Organization Controls (SOC) Examination

DirectTrust is committed to ensuring that healthcare organizations mitigate cyber and ransomware security risks and meet their government’s specific standards and regulatory requirements. For organizations who have already obtained or are working to achieve accreditation through one of EHNAC’s 18 stakeholder-specific accreditation programs, DirectTrust also offers HITRUST CSF certification as well as a System and Organization Controls (SOC) examination.

Made possible through partnerships with Top 20 National Accounting and Consulting Firms, organizations can leverage the time and resource commitments already put into attaining an EHNAC accreditation to fulfill industry compliance requirements by securing a SOC 1, SOC 2, SOC 3 or SOC for Cybersecurity examination.

For more information on EHNAC accreditation and services, contact us at Accreditation@DirectTrust.org.

Also, are you looking for hands-on support to help you through the pre-assessment steps, readiness planning process and more? Learn about DirectTrust’s Consulting and Advisory Services which have been designed to support SOC Examinations.

“By offering both SOC examinations and HITRUST CSF certifications, EHNAC now serves as the total compliance partner for healthcare organizations, furthering their commitment to managing health data with integrity and effectiveness while also providing confidence that stringent security/privacy controls and protocols are implemented.”

– Lee Barrett, Commission Executive Director, DirectTrust

What are SOC examinations?

SOC examinations allow organizations to disclose their business control activities and processes, which in turn, provides independent assurance to customers, prospects and financial statement auditors that their processes and controls are sound. Developed by the American Institute of Certified Public Accountants (AICPA), SOC reports focus on a business’s non-financial reporting controls as they relate to security, availability, processing integrity, confidentiality and privacy of a system.