SOURCE: eGestalt Technologies Inc.

eGestalt Technologies Inc.

May 11, 2011 09:45 ET

eGestalt Publishes White Paper on Solution for HIPAA Compliance for Small Medical Practices and Affiliates

SANTA CLARA, CA--(Marketwire - May 11, 2011) - eGestalt Technologies (, a world leading provider of cloud-based, SaaS-delivered, security and information technology governance, risk management and compliance (IT-GRC) solutions for small to mid-size organizations, today announced a White Paper that spells out in layman's terms what businesses need to know about the Health Information Portability and Accountability Act (HIPAA) and its associative enforcement regulation called HITECH that was signed into law on February 2009 as part of Washington's economic stimulus package.

HITECH stands for Health Information Technology for Economic and Clinical Health. The act is designed to expand the impact and enforcement of HIPAA by defining the penalties for non-compliance of HIPAA.

The eGestalt White Paper ( highlights how not only healthcare providers but the various professionals who service them and their medical practices day to day are equally susceptible to HIPAA/HITECH regulations. These professionals affiliated with healthcare providers are defined by the regulations as Business Associates, and include "anyone who routinely exchanges or accesses Patient Health Information (PHI)."

According to HIPAA rules, Business Associates must also develop and implement written PHI security policies and procedures; they can also be audited by the U.S. Health & Human Services department and can, like healthcare providers, "easily incur penalties for failure to comply."

"Doing a self-assessment, followed by risk analysis, is a critical step in achieving security and compliance," says Anupam Sahai, president of eGestalt and co-author of the White Paper. "Subsequently, maintaining continuous compliance by plugging the security and compliance gaps through remediation is the key to mitigating risk, reducing exposure, and assuring avoidance of the increasing threat of penalties."

The paper demystifies security and HIPAA/HITECH, makes a strong case in support of a solution to the HIPAA/HITECH problem, advocating for the deployment of SecureGRC SB™, a patent-pending Cloud computing and automated Software-as-a-Service (SaaS) application that helps to meet these challenging privacy and security regulations at dramatically less cost and complexity than standard approaches.

Says Sahai, "SecureGRC SB demystifies security and compliance through automation of the self-assessments you need to conduct in order to accomplish this. Comprehensive HIPAA and HITECH support is simplified and built-in, easily extended, and automatically kept up to date. The self-assessment model is powerful since it begins by simply guiding the user with a set of questions."

Once users have made their first pass, the compliance gaps are clearly communicated, SecureGRC's risk calculator prioritizes the areas that need immediate attention first. SecureGRC SB is delivered through managed compliance providers (MCP) who leverage the built-in 'Best Practices' library in the solution on how best to customize and resolve each and every open issue with a common sense approach depending on the particular business deployment.

To download a free copy of the eGestalt White Paper, visit:

About eGestalt Technologies Inc.
eGestalt ( is a world-class, innovation driven, leading provider of cloud-computing based enterprise solutions for information security and IT-GRC management. eGestalt is headquartered in Santa Clara, CA, and has offices in the US, Asia-Pacific and Middle East. eGestalt was nominated Breakthrough Technology Vendor at XChange Americas, Aug. 2010, and selected by SiliconIndia among the "Top 10 Security Companies to Watch." Its SecureGRC application was voted runner-up in the Managed Services Category at XChange Tech Innovators, Nov. 2010. And in Feb. 2011 eGestalt VP of Worldwide Sales Jim Hare was been named a Channel Chief by Everything Channel's CRN.

Contact Information

  • Press Contact:
    Victor Cruz
    For eGestalt Technologies
    Email Contact