Interesting. I haven’t fully read through the rule change, but seems like HHS is directly adopting the controls required by HITRUST? I have been out of the industry for a while. Always interesting how the industry shapes regulation and vice versa.
I'm not sure how meaningful it is to adopt some of the controls from HITRUST without any of the consequences.
I'm not sure how meaningful it is to adopt some of the controls from HITRUST without any of the consequences.