Clinical Security LLC specializes in implementing and managing information security programs for healthcare and highly regulated businesses, typically small healthcare organizations, startups, and growing businesses with fewer than 150 employees. For non-healthcare companies, we typically recommend implementing ISO 27001 or NIST NSF but depending on industry requirements may recommend NIST 800-53 or CMMC. We can have a full program in place in just a few months with continuous improvement to meet certification requirements. We are experts in HIPAA and can also implement HITRUST. We design a program that adheres to multiple frameworks including any combination of NIST CSF, HIPAA, PCI DSS, and ISO 27001.We offer a number of security services ranging from phishing simulations to penetration testing and vulnerability management. We will recommend external vendors or technologies when appropriate and most cost-effective for your business. We will support your company using the latest technologies such as Slack and Microsoft Teams for quick response and regular follow-up. We take a proactive and risk-based approach to security and program management. If you need a new information security program or to enhance what is already in place, contact safe@clinicalsecurity.net.