Security work is built to CIS Controls v8 and NIST CSF 2.0. The evidence we keep can support OPWDD expectations, HIPAA, the NY SHIELD Act, and cyber insurance questions. Which requirements apply to your provider, and how they are interpreted, stays with your agency and its compliance advisors.
- CIS Controls v8
- NIST CSF 2.0
- HIPAA
- NY SHIELD Act
- 42 CFR Part 2
- OPWDD
- Cyber insurance
Where our responsibility stops
We support the technology around your approved documentation and electronic visit verification (EVV) systems, such as Therap. We do not manage program records, verify visits, or take over the application vendor’s job. Your agency and its vendors keep those responsibilities.