NAC, Inc. Achieves HITRUST CSF™ Certification

Duncansville, PA November 7, 2017 – In its continual efforts of evolving and investing in its assurance platforms, NAC, Inc., an international leader in direct mail marketing, announced it has earned HITRUST CSF v8.1 Certification. As one of the most comprehensive and widely-adopted information security frameworks, the HITRUST CSF Certification process required a rigorous assessment process of NAC’s security controls conducted by an Approved HITRUST CSF Assessor, IS Partners LLC, culminating in the testing of selected controls and validation through the HITRUST CSF.

Achievement of HITRUST CSF Certification not only recognizes NAC’s ability to meet key healthcare regulations and requirements for protecting and securing sensitive, private healthcare information (PHI), but that NAC’s practices and controls are implemented, monitored, and tested to meet the highest level assurance to meet or exceed defined requirements across a broad range of industries. The HITRUST CSF™ control requirements are comprehensive and address all aspects of an organization’s protection of information and the management of systems and networks and specifically the controls necessary to protect personal health and financial information. The HITRUST CSF was designed to leverage established information security and management platforms such as PCI DSS, ISO 27001/27002, and NIST to create a practical and measurable approach for validating a company’s implementation of the controls and compliance of their practices.

The HITRUST CSF Certification directly complements NAC’s recent SOC 2 Type II certification. Where the SOC paradigm speaks to the design and effectiveness of control implementation, HITRUST CSFand its prescriptive controls addresses the maturity and scale of the controls applied within specific security domains, assuring that NAC’s practices meet not only the basic requirements, but progressively intensify to meet the level of risk that correspond to the scope of the organization’s activities.

“Achieving HITRUST CSF Certification is an integral part of NAC’s overall information security management strategy,” said Stacey Burket, Vice President of Compliance & Operational Risk. “With its comprehensive framework, exacting requirements and wide-range of applicability, certification under HITRUST CSF isn’t merely a snapshot of compliance, but an assurance of practices. You simply cannot achieve this type of certification through a single initiative. It requires the demonstration of mature and well managed practices. That is the value to NAC and our clients and we are pleased to be one of the organizations worldwide to have earned this certification.”

About HITRUST – Founded in 2007, the HITRUST Alliance, Inc., a not for profit, was born out of the belief that information protection should be a core pillar of, rather than an obstacle to, the broad adoption of health information systems and exchanges. HITRUST— in collaboration with public and private healthcare technology, privacy and information security leaders — has championed programs instrumental in safeguarding health information and managing information risk while ensuring consumer confidence in the organizations that create, store or exchange their information.

About IS Partners, LLC – IS Partners, LLC is a Certified Public Accounting firm registered with the AICPA and PCAOB, and is a recognized authority for SOC 1 (SSAE 18) and Service Organization Controls (SOC), PCI, HITRUST and related attestation services. The firm serves clients in all major service industries throughout the United States, Canada, United Kingdom, India, Pakistan and Caribbean Islands. The firm’s SOC audit teams are comprised of experts in the areas of accounting, information technology, internal controls, and business process auditing. IS Partners, LLC has office locations in the states of Pennsylvania, Delaware and Arizona.

About NAC, Inc. – NAC Inc. is the nation’s largest vertically integrated direct mail & fulfillment company.  With regionalized production locations, NAC markets a diverse portfolio of direct mail services, including Envelope Production, Forms & Commercial Printing, Data Processing, Imaging, Bindery, Lettershop, Mailing & Commingling.  With all of our services completed in-house, all campaigns are completed efficiently and tailored to client specifications.  NAC offers unparalleled production capacity and geographic coverage with facilities in Pennsylvania Texas, and Mexico.