Discover how Luma Healthโs compliance program is differentiating them in their industry
Healthcare
SOC 2 Type 2; HITRUST; Penetration Testing; ISO 27001
Luma Health is the creator of the worldโs first digital Patient Success Platformโข, which connects and orchestrates all of the steps in the patient journey, along with all the operational workflows and processes in the healthcare ecosystem.
Opportunity
When Nick Lees became the Director of Information Security and Compliance at Luma Health, the company had seen an increase in client requests for their standards and compliance certifications. They already had their SOC 2 Type 2 assessment and were interested in adding in HITRUST CSF. Nick recognized the opportunity to not only do that, but to implement a more thorough and robust compliance program that could help Luma attract more clients and bigger business opportunities.
Solution
Before coming to Luma Health, Nick worked jointly with 360 Advanced to provide compliance assessments and cybersecurity services for an info security program he was building at another company. He really valued 360 Advancedโs technical knowledge and collaborative nature, and knew he wanted 360 Advanced to help him build a compliance program for Luma. Luma Health has used 360 Advanced as their trusted third-party advisor since 2021.
Results
โOur work with 360 Advanced demonstrates to our clients that we take
the security and privacy of their data very seriously, and that weโre
continuously trying to improve our program and stay on top of changes
and emerging threats.
It also boosts our business brand as well. Weโre one of the only companies
in our space that has HITRUST, SOC 2 and ISO 27001, and it definitely
separates us, especially when we go into a sales meeting or talk to a
prospectโs info security team. It gets us a seat at the table with clients
who may not have considered us previously.โ
Nick Lees
Director of Information Security and Compliance
360 Cyber Resources
Explore a wealth of knowledge in our client stories, insightful blogs, cutting-edge white papers, and the latest press releasesโyour gateway to a repository of expertise and industry insights.
StationMD Successfully Completes SOC 2 & SOC 3 Examinations, Reinforcing Commitment to Data Security in Telehealth for the I/DD Community
Maplewood, New Jersey – April 18TH, 2025 – StationMD, a leading telehealth provider dedicated to individuals with intellectual and developmental disabilities (I/DD), has successfully completed both a SOC 2 and...
SOC 2 Success Highlights Meperiaโs Dedication to Safeguarding Client Data
Vero Beach, Florida – April 17h, 2025 – Meperia, a leading innovator in cost management and revenue enhancement solutions for the healthcare supply chain, has successfully completed its SOC 2...
Don’t Get Burned: 5 Things to Know Before You Choose a Cybersecurity Vendor
Cybersecurity and compliance are essential components for any business that deals with personal / sensitive data or simply wants to harden their online assets. With this imperative of the digital...
