DirectTrust extends accreditation agreement with EHNAC through 2018

WASHINGTON, Dec. 12, 2017 -- DirectTrust today announced the extension through 2018 of its agreement with the Electronic Healthcare Network Accreditation Commission (EHNAC) to administer its DTAAP accreditation and audit for Certificate Authorities and Registration Authorities. DirectTrust is a health care industry alliance created by and for participants in the Direct exchange network used for secure, interoperable exchange of personal health information (PHI) between provider organizations, and between provider and patients, for the purpose of improved coordination of care.

Additionally, DirectTrust will offer in 2018 a new accreditation program for DirectTrust Healthcare Information Service Providers (HISPs) of Direct messaging and exchange. Recognizing the flexibility being demanded in the health care market for high assurance accreditation and certification in the areas of security and privacy, the new program provides DirectTrust HISPs with the option of obtaining their HIPAA Privacy and Security accreditation and audit through either DirectTrust DTAAP or HITRUST CSF Assurance.

“We’re very pleased to continue to have EHNAC as an accrediting and auditing partner in our Trust Framework while also accepting the HITRUST CSF Certification as a means of ensuring implementation of HIPAA Privacy and Security best practices for our community. Much recent attention has been focused on the trust frameworks and agreements used in support of health information exchanges in and between networks,” said DirectTrust President and CEO David C. Kibbe, MD, MBA. “The ONC’s rulemaking in this area is coming very soon, with a first draft for public comment expected by the end of December. As such, accreditation, and on-site audit of privacy, security, and trust-in-identity controls and practices remains a central component of our Trust Framework, and the agreements and contracts that depend upon such accreditation and audit being performed regularly.”

“This agreement extends the ability for EHNAC and DirectTrust to work together to ensure a secure and unyielding trust framework for all health care stakeholders by providing significant flexibility to Direct Exchange Network participants,” said EHNAC Executive Director Lee Barrett. “In addition to managing the Privacy and Security requirements of these accreditation programs, EHNAC’s role as an Approved HITRUST CSF™ Assessor adds a new dimension to our relationship with DirectTrust, as we continue our partnership to support the secure and interoperable exchange of PHI for some of the highest respected brands in our industry.”

About DirectTrust
DirectTrust is a five-year old, non-profit, vendor neutral, self-regulatory entity initially created by and for participants in the Direct community, including Health Internet Service Providers (HISPs), Certificate Authorities (CAs), Registration Authorities (RAs), doctors, patients and vendors, and supports both provider-to-provider as well as patient-to-provider Direct exchange. In the period 2013 to 2015, DirectTrust was the recipient of a Cooperative Agreement Award from the Office of the National Coordinator for Health Information Technology (ONC) as part of the Exemplar HIE Governance Program. DirectTrust serves as a forum and governance body for persons and entities engaged in the Direct exchange of electronic health information as part of the Nationwide Health Information Network (NwHIN). DirectTrust's Security and Trust Framework is the basis for the voluntary accreditation of service providers implementing Direct health information exchange. The goal of DirectTrust is to develop, promote, and, as necessary, help enforce the rules and best practices necessary to maintain security and trust within the Direct community, consistent with the HITECH Act and the governance rules for the NwHIN established by ONC. DirectTrust is committed to fostering widespread public confidence in the interoperable exchange of health information. To learn more, visit www.directtrust.org.

ation Service Providers (HISPs) of Direct messaging and exchange. Recognizing the flexibility being demanded in the health care market for high assurance accreditation and certification in the areas of security and privacy, the new program provides DirectTrust HISPs with the option of obtaining their HIPAA Privacy and Security accreditation and audit through either DirectTrust DTAAP or HITRUST CSF Assurance.

“We’re very pleased to continue to have EHNAC as an accrediting and auditing partner in our Trust Framework while also accepting the HITRUST CSF Certification as a means of ensuring implementation of HIPAA Privacy and Security best practices for our community. Much recent attention has been focused on the trust frameworks and agreements used in support of health information exchanges in and between networks,” said DirectTrust President and CEO David C. Kibbe, MD, MBA. “The ONC’s rulemaking in this area is coming very soon, with a first draft for public comment expected by the end of December. As such, accreditation, and on-site audit of privacy, security, and trust-in-identity controls and practices remains a central component of our Trust Framework, and the agreements and contracts that depend upon such accreditation and audit being performed regularly.”

“This agreement extends the ability for EHNAC and DirectTrust to work together to ensure a secure and unyielding trust framework for all health care stakeholders by providing significant flexibility to Direct Exchange Network participants,” said EHNAC Executive Director Lee Barrett. “In addition to managing the Privacy and Security requirements of these accreditation programs, EHNAC’s role as an Approved HITRUST CSF™ Assessor adds a new dimension to our relationship with DirectTrust, as we continue our partnership to support the secure and interoperable exchange of PHI for some of the highest respected brands in our industry.”

About DirectTrust
DirectTrust is a five-year old, non-profit, vendor neutral, self-regulatory entity initially created by and for participants in the Direct community, including Health Internet Service Providers (HISPs), Certificate Authorities (CAs), Registration Authorities (RAs), doctors, patients and vendors, and supports both provider-to-provider as well as patient-to-provider Direct exchange. In the period 2013 to 2015, DirectTrust was the recipient of a Cooperative Agreement Award from the Office of the National Coordinator for Health Information Technology (ONC) as part of the Exemplar HIE Governance Program. DirectTrust serves as a forum and governance body for persons and entities engaged in the Direct exchange of electronic health information as part of the Nationwide Health Information Network (NwHIN). DirectTrust's Security and Trust Framework is the basis for the voluntary accreditation of service providers implementing Direct health information exchange. The goal of DirectTrust is to develop, promote, and, as necessary, help enforce the rules and best practices necessary to maintain security and trust within the Direct community, consistent with the HITECH Act and the governance rules for the NwHIN established by ONC. DirectTrust is committed to fostering widespread public confidence in the interoperable exchange of health information. To learn more, visit www.directtrust.org.

Contact:
Ed Emerman
Eagle Public Relations
609.275.5162                                     
[email protected]