Security Policy and Compliance

Offerings relating to institutional policy or compliance guidelines and requirements. Includes support for audit processes.

Services (2)

Health Information Security

Health Information Security provides compliance advice and performs services required by the HIPAA Security rule.

Security Policy

GRC provides services related to the creation/drafting of IT and IT security policy, review of policy, enforcement of policy, as well as general consulting about policy. This includes additional documentation as it relates to policy including standards, guidelines, and process and procedures. Additionally, GRC can provide consulting/review/assessment/attestation of numerous areas of compliance as it relates to: PCI DSS, HIPAA, FERPA, GLBA, CUI, CMMC, NIST SP 800-xxx, CJIS, ITAR, NDAA 889, NSPM-33, etc.