SecureGRC SB™ from eGestalt to help small businesses with HIPAA & HITECH compliance

eGestalt is a provider of information technology governance, risk management and compliance (IT-GRC) solutions for small to mid-size organizations. eGestalt, headquartered in Santa Clara, California, and has offices in US, Asia-Pacific and Middle East., has announced the U.S. availability of SecureGRC SB™, a patent-pending Cloud computing and Software-as-a-Service (Saas) application that helps to meet HIPAA and HITECH privacy and security rules at dramatically less cost and complexity than standard approaches. The features include:

  • Comprehensive support for HIPAA & HITECH applicable to small businesses
  • Covers both Privacy and Security rules
  • A finished document that can be used to show compliancy to other organizations and auditors
  • Menu-driven assessment to understand and gain control over HIPAA/HITECH requirements
  • Library of free policies and example templates that can be customized to attach as evidence
  • Central repository for all HIPAA related documentation
  • Automatic updates on new or revised policies, procedures, or forms that reflect changes in the standards
  • Automatic updates to changes in regulatory requirements
  • Quarterly reminder assessments to help stay on track
  • Tracking and managing of Business Associates (BA’s)
  • Simple plug-in for PCI-DSS compliance

“SecureGRC SB is a patent-pending, breakthrough solution designed with the small medical practice in mind,” says Anupam Sahai, President, eGestalt. “Medical practices and their Business Associates can become HIPAA/HITECH compliant in a very cost-effective manner without requiring deep domain expertise. By leveraging our SaaS-based automated tool, which has won numerous awards, channel partners are able to deliver these packaged security and compliance services to small medical practices in a cost-effective manner thereby meeting a huge unmet demand as communicated to us by our channel partners and end-customers.”

Says Dr. Kellner of Mount Kisco, NY, a licensed psychologist and trained psychoanalyst, “I have been practicing for over 10 years and never thought I had any reason to be HIPAA compliant. After all, I have a private practice, I’m not a hospital. But I attended a webinar by eGestalt on their product called SecureGRC SB. I quickly realized that I had several areas of exposure regarding my patients’ information. So I tried the SecureGRC SB program, as it was only $500 and was easy to use.
“I was really surprised by the number of areas that I was exposed,” says Dr. Kellner. “Using the program I quickly identified and fixed the problems. I am now requiring all of my Business Associates to use this program to help protect my practice. I know I would never get audited, that was not my concern. I just wanted to make sure I was doing the right things to protect my patients’ privacy and this was an inexpensive and low risk approach.”