How can a global healthcare technology company achieve HITRUST r2 certification while managing an expanded assessment scope and more than 400 control requirements? This case study examines how Ampcus Cyber supported a healthcare technology company headquartered in Buchs, Switzerland, in achieving successful HITRUST r2 recertification across an environment spanning 3,000+ healthcare automation systems worldwide.
Within only 14 weeks to prepare, the engagement addressed expanded personnel, processes, technologies, and Pneumatic Tube Systems (PTS) infrastructure while aligning applicable HIPAA requirements. The structured approach covered scope definition, control assessment, evidence validation, risk management, remediation, governance, internal audit, and validated assessment preparation. A Global Healthcare Technology.
The result was successful HITRUST r2 recertification, stronger evidence management, improved governance, better integration between compliance and risk management, and readiness for ongoing assessments.
