How does MS2 help achieve compliance?

Maintaining an overall security management process is generally much more important than the implementation of specific safeguards in achieving compliance.  For the most part, regulations acknowledge that organizational security needs and issues vary and that an organization must establish the safeguards most appropriate and reasonable for the business processes and purposes of that organization. MS2 provides a process and framework to establish and document a comprehensive security program to meet regulatory intent, to conduct a security audit, and to prepare needed reports.

In addition, MS2 maps an organization’s security practices to major security standards that support the compliance audits. MS2 supports, but is not limited to, the following generally accepted and published industry security practices:

• National Institute of Standards and Technology (NIST)
• Department of Health and Human Services (DHHS/CMS)
• Information System Security Association (ISSA)
• Information Systems Audit and Control Associations (ISACA)
• ISO 17799 Standards
• WEDI/SNIP Organizations
• State Health Association Organizations