The Health Information Trust Alliance’s (HITRUST) Common Security Framework offers organizations that use personal health and financial information tools to manage their risk and compliance efforts. HITRUST has said that entities covered by the Health Insurance Portability and Accountability Act (HIPAA) are increasingly requiring their business associates to become compliant with the program.

But the HITRUST framework is not the only option organizations have for their security governance, as Health Care senior counsel Allen Briskin explains to HealthcareInfoSecurity. Briskin also comments on how the decision to require HITRUST certification impacts business associate agreements. Read the full article here.