Healthcare privacy insights for the people who run these programs.
Regional Healthcare Compliance Conferences. Details coming soon.
Four access events. Which ones should have happened?
Make the call on the log alone, then see the context Intruno attaches to the same event.
SOC 2 Type II report
Independent examination by A-LIGN covering the Security trust services criteria, April 1 to June 30, 2026.
ONC Certified Health IT
Certified December 7, 2021. Certification ID, criteria in scope, and the required ONC disclaimer.
Building a defensible patient privacy program
A framework for structuring monitoring, investigation, and reporting into one operation.
Why access volume isn’t the same as access risk
Rethinking how privacy teams prioritize what actually deserves review.
Aligning security and privacy on insider risk
A conversation on shared ownership of PHI access risk between CISOs and privacy officers.
What behavioral context adds to access review
How role, timing, and relationship data change the meaning of a single access event.
A large academic health system’s approach to privacy operations
Illustrative scenario: how a multi-hospital system consolidated privacy monitoring into one workflow.
From alert fatigue to structured investigation
Moving privacy teams away from undifferentiated alert queues toward prioritized casework.
The regulatory landscape for PHI access monitoring
An overview of the compliance expectations shaping privacy program design today.
Preparing for a HIPAA audit: what evidence to have ready
A practical look at the documentation auditors typically expect from a privacy program.
Insider threat in healthcare: a different shape than IT security
Why healthcare insider risk requires healthcare-specific context, not generic security tooling.
No resources match your search.
This category houses Intruno’s current certifications and independent audit reports as they become available for public reference. Each entry includes the certifying body, the scope of assessment, and the date.
SOC 2The SOC 2 report is confidential and is shared under a non-disclosure agreement. Request a copy.
ONC Certified Health IT — certified December 7, 2021.
This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services. Additional costs beyond the agreed-upon contract may be incurred if the number of applications monitored increases, the size of the user base increases, or the volume of data being consumed increases beyond the initial scope of the contract, increasing storage requirements. No additional costs apply for using certified functionality.
§ 170.315 (d)(13) Multi-factor authentication
Intruno supports multifactor authentication by integrating as a service provider with a third-party identity provider over the SAML 2.0 standard. Example vendors include Ping Identity, Microsoft Azure Active Directory, OneLogin, Okta, and others. In this scenario, users attempting to authenticate to Intruno are directed to the identity provider to authenticate. The identity provider is then configured to require the user to pass multifactor authentication before returning the authenticated user to the Intruno system.
More on this coming regularly.
This section is designed to grow: new articles, webinars, and case studies will populate this same card system as they’re published.