At FIGmd, we embed Security, Compliance & Process Excellence in the fabric of our day to day operations.
We understand the needs of our customer, and a paramount one being Security of their data.
To instill this realization across the organization, we extend the accountability beyond the Information Security Group - thus, leveraging the entire organization to act as a custodian of secured processes to ensure compliance. We achieve this by connecting the dots - our workflows, standard operating procedures, deliverables; all have an essential component that is carefully planned, interwoven, executed, tested, reviewed and audited - this is the Security component. The basic security hygiene is achieved through ongoing Security & Compliance Awareness sessions for all.
Our journey to achieve ONC HIT 2015 Certification for FIGmd Platform, EHNAC accreditation for DRAP and CEAP, including HIPAA, have strengthened our Security posture. We partner with AWS to securely store our customer's data; thus, leveraging the best security practices of a trusted Global leader in Cloud computing. These steps have helped us to provide improved and secured solutions to our customers.
Our robust Security & Compliance framework is a well-thought strategy, focused on reducing risk. We deploy relevant and required controls, tools and processes which help us to Identify, Protect, Prevent, Detect, Defend, Remediate and Recover from potential vulnerabilities. This is executed by a team of highly skilled resources who are our assets and bring the best of industry knowledge with their experience. While we are strongly committed to provide high end secured solutions, our eyes are on the horizon. We relentlessly work towards equipping our organization to meet the increasing demands of a highly secured environment in the face of ever-increasing cyber security challenges.
To reduce the risks of the current threat landscape, our compliance road map is to achieve HITRUST V9.1 including GDPR, SOC2 and 21 CFR Part 11 along with increased focus on consistent awareness programs, adherence to industry best practices, better tools and technology, and external assessments.