Infosec officer shares tips for keeping IT vendors HIPAA-compliant

Inspira Health Network has implemented a vendor-monitoring programme to ensure compliance with HIPAA regulations. The programme begins with a thorough inventory of all business associates and checking that proper agreements are in place. Inspira has also developed a questionnaire to assess vendors’ security and compliance practices. The programme aims to reduce the risk of breaches and penalties and improve data protection.