Discover how Luma Health’s compliance program is differentiating them in their industry
Healthcare
SOC 2 Type 2; HITRUST; Penetration Testing; ISO 27001
Luma Health is the creator of the world’s first digital Patient Success Platform™, which connects and orchestrates all of the steps in the patient journey, along with all the operational workflows and processes in the healthcare ecosystem.
Opportunity
When Nick Lees became the Director of Information Security and Compliance at Luma Health, the company had seen an increase in client requests for their standards and compliance certifications. They already had their SOC 2 Type 2 assessment and were interested in adding in HITRUST CSF. Nick recognized the opportunity to not only do that, but to implement a more thorough and robust compliance program that could help Luma attract more clients and bigger business opportunities.
Solution
Before coming to Luma Health, Nick worked jointly with 360 Advanced to provide compliance assessments and cybersecurity services for an info security program he was building at another company. He really valued 360 Advanced’s technical knowledge and collaborative nature, and knew he wanted 360 Advanced to help him build a compliance program for Luma. Luma Health has used 360 Advanced as their trusted third-party advisor since 2021.
Results
“Our work with 360 Advanced demonstrates to our clients that we take
the security and privacy of their data very seriously, and that we’re
continuously trying to improve our program and stay on top of changes
and emerging threats.
It also boosts our business brand as well. We’re one of the only companies
in our space that has HITRUST, SOC 2 and ISO 27001, and it definitely
separates us, especially when we go into a sales meeting or talk to a
prospect’s info security team. It gets us a seat at the table with clients
who may not have considered us previously.”
Nick Lees
Director of Information Security and Compliance
360 Cyber Resources
Explore a wealth of knowledge in our client stories, insightful blogs, cutting-edge white papers, and the latest press releases—your gateway to a repository of expertise and industry insights.
Revenue Growth & New Business with FedRAMP Certification
The Federal Risk and Authorization Management Program, or FedRAMP, is a government-wide program that standardizes the approach to security assessment, authorization, and continuous monitoring for cloud products and services. The...
Bregal Sagemount Basecamp Announces Strategic Growth Investment in 360 Advanced
New York, NY – January 7th, 2025 – Bregal Sagemount (“Sagemount”), a leading growth-focused private equity firm, today announced a minority growth investment from its Basecamp fund, in 360 Advanced,...
Midwest Direct Strengthens Customer Trust with Completion of SOC 2 Type 2 Examination
Cleveland, OH – January 3rd, 2025, Midwest Direct, a trusted company in data processing, printing, and mailing services, is proud to announce the successful completion of its first SOC 2...