We live in a world of ever increasing threats to our safety and well being.  Some of these are physical, and some exist solely digitally.  The threats to our personal private information can be the most difficult.  Difficult to identify, detect, and protect against.  Unfortunately, industry has historically been slow to react to these threats, allowing a climate of increased risk to exist.  While almost all participants follow ethical guidelines of one nature or another, this has still left significant vulnerabilities, which are being exploited every second of every day.  It is from this basis, that both the Federal and State Governments have used their statutory powers to develop regulations to help address these threats.

While their objectives are noble, the final result is frequently far from straightforward.  The result is a complex array of overlapping, and frequently conflicting regulations and statutes that mandate behaviors and best practices to address these threats, and to improve the process efficiency in certain sectors of our Country.  Each regulation or statute, is designed to resolve a particular set of vulnerabilities or process weaknesses.

Every industry has their set of regulations specific to their issues.  These range from basic competency to specific responsibilities.  In general, most of these regulations are best practice processes and are good for business. 

Regulatory issues are complex and  confusing.  This is principally because they require advanced skill sets not typically found in small to medium sized organizations.  They are also very time consuming.  Attempting to fully address the requirements for a specific regulation set can overpower your existing business commitments, and strain staffs to the breaking point, assuming that the regulations are fully understood.  Anything less that full understanding typically results in poor or bad faith compliance, which brings additional risks.  For most organizations, private or public, the answer is to seek temporary support to meet these complex and frequently changeable mandates.

Regulatory Compliance Associates, and affiliated companies, have vast expertise in all areas of Business Process, Privacy, Security, and Application ( and System) compliance in a broad range of regulation sets, both domestically, as well as internationally.  His team of cost effective regulatory warriors can rapidly assist your organization meet its compliance responsibilities with the least amount of trauma to your organization and workforce.

Our Services focus is on seven primary areas:

• Risk & Liability
  Regulatory applicability (triggering condition assessments for covered entity or jurisdiction), Risk Tolerance & Avoidance Strategies, Risk Assessments, Threat Profiling, Risk Management, Expert Witness Services.
• Privacy
  Administrative controls, organizational policies, customer notices, privacy training, and record keeping, auditing.
• Security & Safeguards
  Best practice information assurance (security), certification and accreditation processes, physical safeguards, access controls and authentication, security policies, business continuity and disaster recovery, infrastructure hardening, data management.
• Applications (Systems, including Transactions)
  Regulatory application design, application validation & certification, compliance auditing, transactional requirements, access controls and safeguards, disadvantaged (ADA & 508) user requirements.  More Information
• Business Processes
  Business process and work flow design, regulatory compliant processes, process controls and oversight, regulatory reporting, and work flow design.
• Business Integrity Controls (Sarbanes-Oxley)
  Administrative management controls, organizational control policies, training, and record keeping processes, auditing, and application certification.
• Certification & Accreditation (NIST800 C&A/DITSCAP)
  An administrative management process to assess, certify, and authorize (approve) system processing prior to operations and periodically thereafter.  
  More Information:  on C&A, on DITSCAP

We have unique expertise with these regulations, the regulatory process, and the governmental entities that create and enforce these regulations. Our team, and associates, have decades of experience within government and industry, and have not only dealt with most regulatory issues, but chaired organizations actively developing compliance standards. Our knowledge has been developed from extensive first hand experience along with the available body of knowledge, but as frequently occurs, we are also regulatory research experts and can resolve most obscure and gray issues, through legal opinion, guidance, or best practices.

We have direct expertise and are specialists in numerous market segments:

• Insurers
• Financial Institutions
• Non-Traditional Financial Activities
• Healthcare - Large, Medium, and Small Providers
• Rural & Small Hospitals
• Local & State Governments
• Clinical Trials & Pharmaceutical Research
• Law Enforcement & Emergency Services
• Nonprofit Organizations
• Military & Federal Subcontractors
• Internet & Application/System Vendors
• Direct Mail & Telemarketers

Next >>
 

For more information about us, please click here.

Please contact us to explore your specific regulatory challenges.
Remember, regulatory deadlines don't wait!  It's the LAW!

Call Us Today! +1-727-787-9801 or +1-347-412-0574