Eventa: HITRUST compliance reclaimed after consecutive reports full of corrective actions.

The problem

Eventa handles sensitive health data for three major payers and consults on post-acute respiratory care. Consecutive yearly HITRUST reports came back with high numbers of corrective action plans because its previous provider did not follow through on its side of the compliance checklist, and could not produce consistent access logs. The certification was in jeopardy.

The scope

Replacement of standalone servers in two co-location facilities with Microsoft Azure services, then ongoing operations, security, and HITRUST support.

What we did

• Stepped in on an emergency server outage before any contract was signed.
• Worked through Eventa's goals and recommended Azure services to replace standalone servers.
• Reduced the environment to what was necessary, which lowered cost and the number of vulnerabilities.
• Specified the service tiers needed for HITRUST controls to map to the Microsoft environment, and reviews billing as the environment changes.

The result

Eventa reclaimed HITRUST compliance, and its systems are ready to scale as it opens more locations. Its clinical team has more time for patient care.

“They weren't even under contract yet, but still made themselves available in an emergency situation, and at emergency hours, until they got the problem resolved.”