The HITRUST framework is a significant hurdle that many business find it convenient or necessary to overcome. Our company is in the process of becoming HITRUST certified, but we're [more than a little] weird from the HITRUST perspective. The reason is that we utilize a lot of modern paradigms that don't necessarily mesh with The HITRUST Way.

In this talk, I'll explain how we started this and hopefully what sort of great shape we're in along that path. This will include how our automation has helped (or hurt) us along the way, and how we've used compliance-as-a-service tools to improve this process.

Note that this process is currently underway (as of 2021-03) and so by the time we get to ADDO, anything is possible!