Element Critical

Health Insurance Portability and Accountability Act

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge.

Health Information Technology for Economic and Clinical Health Act

The Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 provides HHS with the authority to establish programs to improve health care quality, safety, and efficiency through the promotion of health IT, including electronic health records and private and secure electronic health information exchange.

International Standard on Assurance Engagements No. 3402

ISAE 3402 was developed to provide an international assurance standard for allowing public accountants to issue a report for use by user organizations and their auditors (user auditors) on the controls at a service organization that are likely to impact or be a part of the user organization's system of internal control over financial reporting.

International Standard for Standardization 27001

ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS).

Leadership in Energy and Environmental Design

A LEED credential denotes proficiency in today's sustainable design, construction, and operations standards.

Payment Card Industry Data Security Standard

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard used to handle credit cards from major card brands.

System and Organization Controls 1

System and Organization Controls 1, or SOC 1, aims to control objectives within a SOC 1 process area and documents internal controls relevant to an audit of a user entity's financial statements.

System and Organization Controls 1 Type 1

Report on the fairness of the presentation of management's description of the service organization's system and the suitability of the design of the controls to achieve the related control objectives included in the description as of a specified date.

System and Organization Controls 1 Type 2

Report on the fairness of the presentation of management's description of the service organization's system and the suitability of the design and operating effectiveness of the controls to achieve the related control objectives included in the description throughout a specified period.

System and Organization Controls 2 Type 1

SOC 2 Type 1 compliance evaluates an organization's cybersecurity controls at a single point in time.

System and Organization Controls 2 Type 2

SOC 2 Type 2 compliance evaluates an organization's cybersecurity controls over a period of time.

Statement on Standards for Attestation Engagements 16 Type 1

The SSAE 16 audit will result in a Service Organization Control (SOC) 1 report.

Statement on Standards for Attestation Engagements 16 Type 2

The SSAE 16 audit will result in a Service Organization Control (SOC) 2 report.

Statement on Standards for Attestation Engagements No. 18

SSAE 18 is a standard established by the AICPA that enhances the quality and consistency of service organization control reports.