Major Health Information Network Connects To Better Information Security

About this Case study

This major health information network found a catalyst for business in Lockpath. Relying on the platform, the company was able to expand its information security efforts while enhancing collaboration and communication efforts. As a result, their information security today plays critical roles in managing operational risk and business decision making.

1. Industry:

   Major health information network

2. Challenge:

   Complex compliance and poor visibility into risks

3. Solution:

   NAVEX GRC Platform, Lockpath

4. Results:

   Better visibility into risks, and ease of regulatory compliance

Read the Case study

Challenge: Manual Processes Fall Short For Complex Compliance & Risk Management

Companies of all sizes have information security challenges, whether it’s dealing with access, managing risks associated with information security or remaining compliant with ever-changing privacy laws.

For the nation’s largest health information network, its information security challenges were larger in scope and complexity, especially since the data it processed often involved personally identifiable information (PII). The company had to comply with the Health Information Portability and Accountability Act (HIPAA),, as well as other regulations and industry standards like Electronic Healthcare Network Accreditation Commission (EHNAC), Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standards (PCI DSS) and the International Organization for Standards (ISO).

In addition to complex compliance challenges, the health information network faced headwinds with managing risk. Without an accurate picture of current and pressing risks, there was no data or metrics to report to management and inform their decisions.

It was also a struggle for the company’s Information Security department to secure funding. Viewed as a cost center, it was hard to convey priorities and justify budget requests without insight and understanding of IT and information security risks.

Download the case study to learn more.

About NAVEX

NAVEX’s GRC software and compliance management solutions support the integrated risk, ESG and compliance management programs at more than 13,000 organizations worldwide.