Meditology Services is a top-ranked provider of information risk management, cybersecurity, privacy, and regulatory compliance consulting services exclusively for healthcare organizations.
We’ve conducted thousands of engagements for a wide variety of healthcare organizations ranging in size from small, individual medical practices to large, complex national healthcare providers, payors, and business associates. Our extensive experience with strategic, operational, and technical elements of healthcare security programs uniquely positions us to truly understand the challenges you face every day.
Our subject matter expertise in the healthcare regulatory environment allows us to act as advisors to the Office for Civil Rights (OCR), the U.S. Department of Health and Human Services (HHS), and the Office of the National Coordinator for Health Information Technology (ONC) on information security, privacy, and HIPAA compliance matters.
Our leadership team consists of CISOs and Privacy Officers with extensive experience in healthcare security and privacy. Security certifications held by Meditology associates include CISSP, CEH, CISA, HCISPP, CIPP, OSCP, PCIP, CPHIMS, CPISM, GSEC, CCNA and HITRUST.
They were unfailingly professional throughout the information gathering and data gathering processes, kept to their timeline and verified the results that they found. The reports produced were accurate and easy to understand, with appropriate benchmarking to other health care organizations and the security industry as a whole. Most importantly, they provided concrete and achievable suggestions to help mitigate the risks identified.
We outsource our IT services and they worked closely with us, and the vendor, to collect required documentation, they accepted input from both sides and explained their conclusions once findings were verified. The team’s project time lines, status reports, and weekly follow up calls kept us all on track for a timely completion. Meditology addressed the significant risk areas in a straightforward manner without making respondents feel defensive, and they freely offered information about industry best practice. The team has definitely won the confidence of our Executive group and expect we will be asking Meditology for more work in the future.
As I learned more about Meditology’s deep technical skills and multiple prior experiences working in healthcare environments similar in size and complexity to Grady, my sense of confidence in Meditology grew. The project was delivered on-time and on-budget, and exceeded my expectations based on the thoroughness and care of the approach, and the quality of the reporting. Meditology was able to achieve each of the engagement objectives, and their report provided a comprehensive picture of Grady’s security posture. I plan to work with Meditology in the future and look forward to similar success.
Over that period of time, they have helped with multiple projects, both large and small, repeatedly delivering as promised. We have come to trust their insights regarding regulatory issues and their vast experience of the healthcare industry when developing security policies, strategies and budgets. We regularly use their ethical hacking skills to test the effectiveness of our security program. In summary, they have earned our trust and become an integral part of our security toolset.
Meditology’s leaders have personal experience in the daily work we perform in health care. Because of this, they understand the needs we have and are able to provide the correct resources at the right time. There are many firms to choose when looking for consultants. However, my experience has shown that Meditology Services is a preferred consulting firm. As our partner assisting us on many of our top priority projects, it is clear that their goal is to provide an exceptional experience to their customers.
They were highly knowledgeable and extremely professional throughout the duration of each project, and the quality of the final deliverables they provided was exceptional. Meditology’s healthcare focus and core competency of Information Security and Privacy were indispensable to the engagement. Their deep knowledge of the HIPAA and HITECH regulations, as well as the Common Security Framework and supplemented by industry operational experience of their team members, added huge value to the assessment. Meditology was able to address significant risk areas in a straightforward manner and was able to provide practical examples and insight on how to go about correcting issues. We will definitely call upon Meditology again when the need arises.
