Press / News


Microsoft and Intraprise Health Announce HITRUST® Community Extension Program Coming to Reston, Virginia on March 20, 2019

Program promotes education and collaboration on risk management through community outreach.

March 5, 2019 – Reston, VA – Microsoft and Intraprise Health (which now includes BluePrint Healthcare IT services) announced today the HITRUST Community Extension Program is coming to the Microsoft Technology Center in Reston, Virginia on Wednesday, March 20, 2019. Coordinated by HITRUST, hosted by Microsoft, and facilitated by Intraprise Health, the one-day, no cost, town hall meeting will provide healthcare organizations of all types and sizes an opportunity to engage with local peers to discuss the challenges, best practices, and lessons learned in effectively implementing a risk management program and improving cybersecurity practices by leveraging the HITRUST CSF®.

“We are extremely pleased to be a part of the Community Extension Program with Microsoft at their Technology Center in Reston. These events have allowed us to bring together CIOs and CISOs from all over to learn and share around their risk management concerns and questions regarding the HITRUST Common Security Framework certification process.” said Mark Ferrarri, Executive Vice President, Intraprise Health.“

Intraprise Health’s HITRUST certification client, HealtheConnections, a Regional Health Improvement Organization, which runs an electronic medical record health information exchange for 26 counties in New York State, will be at the event to give the perspective of a recently-certified healthcare business associate. “Having achieved HITRUST CSF certification, including regulatory requirements to support Centers for Medicare and Medicaid Services (CMS) Minimum Acceptable Risk Standards for Exchanges (MARS-E), we have strengthened our information security processes to exceed the compliance standards that our health information exchange (HIE) participants expect,” said Rob Hack, president and CEO at HealtheConnections.

Some of the topics that will be covered include:

  • Structuring and implementing an information risk management program
  • Considerations in implementing the HITRUST CSF
  • Leveraging the HITRUST CSF to implement the NIST Cybersecurity Framework
  • Considerations regarding a HITRUST CSF Assessment and reporting options
  • Leveraging the HITRUST Threat Catalogue™
  • Implementing a third-party assurance program and effective vendor risk management
  • How to align information risk management and cyber insurance programs
  • Engaging in cyber information sharing and how it supports cyber threat management regardless of size or cyber maturity

“We are very excited to be launching this new program and furthering HITRUST’s engagement with local  communities,” said Michael Parisi, vice president, assurance strategy and community development, HITRUST. “This program provides significant value by allowing organizations to engage with, and learn from, others in the community about how they approach the challenges related to managing risk, controlling compliance costs while effectively implementing a strong security posture.”

With the persistence of information-related threats, healthcare organizations are striving not just to enhance and improve their information risk management, regulatory compliance, and cyber resilience programs – but do so in an efficient and effective manner. Because the HITRUST CSF, CSF Assessment and  threat sharing and response programs are so widely adopted, and are key components of many organization and third-party vendor strategies, this program will aid in streamlining adoption and promoting greater collaboration among organizations across the country. In addition, the growing number of CSF Assessors, currently more than 75, will be leveraged as resources across the country and will enable more ongoing community collaboration.

For more information about the Community Extension Program held at the Microsoft Technology Center in Reston, Virginia, or to register, visit the registration page on the HITRUST website.


About Intraprise Health –

Intraprise Health (the new home of BluePrint Healthcare IT Services) is a certified HITRUST Assessor and award-winning eHealth technology solutions business. We provide health information security products and services to assess, remediate, and monitor our customers’ cybersecurity risk, regulatory compliance programs, organizational resilience, and related third-party vendors’ security posture.


About the Microsoft Technology Center –

Microsoft hosts educational events and technology solutioning experiences in 50-plus locations worldwide. The MTC helps organizations find the right solutions to transform business by bringing together the right collection of resources: experts in Microsoft solutions, alliances with industry leaders who provide comprehensive resourcesk, and an environment that provides rich interactive and immersive experiences to learn first-hand how Microsoft and partner technologies can help solve difficult technology and business challenges.


About HealtheConnections –

HealtheConnections is a not-for-profit organization, offering health information exchange, population health improvement, and value-based care services in 26 counties in New York State. Through trusted collaboration with participants, stakeholders, and partners, HealtheConnections enables improvement in health and healthcare delivery that results in healthier people, better care, and efficient cost.