Clearway Health achieves SOC 2 with a rightsized compliance solution

CHALLENGE

Their team required tailored support to meet a SOC 2 audit project timeline

Clearway Health was searching for a partner to support their SOC 2 compliance requirements. They understood their needs and were well into the evidence collection process and began their search for a vendor who could help.

Clearway Health had identified specific requirements they needed: a proven model that they could customize to meet the needs of their business, automate evidence collection from systems like AWS, Jira, and the Atlassian Suite, and support expanding their certifications to HIPAA and HITRUST.

Rusty Atkinson, VP of Technology at Clearway Health, selected Thoropass as Clearway Health’s trusted partner for their SOC 2 compliance work.

Speaking to this decision, Rusty explained: “I engaged Thoropass to help collect and share evidence in the SOC2 audit process. This allowed us more bandwidth to focus on the macro governance set and satisfy all the subordinate compliance requirements. That’s the Holy Grail in the compliance world.”

SOLUTION

Engage Thoropass for a clear and streamlined implementation roadmap

With Thoropass engaged as their partner, Clearway Health saw a clear path towards success. Clearway Health quickly implemented the Thoropass platform, focusing on connecting the most critical systems needed to collect evidence for SOC 2 Type 1. The easy-to-use platform, clear control requirements, and support from the Customer Success Manager streamlined the implementation.

According to Rusty, “from the beginning, the Thoropass team was very engaged and helpful. Our Customer Success Manager is always there when we need to talk to her.”

In less than two months, the Clearway Health team met their targeted audit date and attained their SOC 2 certification.

RESULTS

Increased operational efficiency

Clearway Health has already seen the benefits of its SOC 2 Type 1 certification as it strengthens their position as a secure technology partner for hospitals and health systems.

“Thoropass is a force multiplier. It makes all the folks involved in operating the technology at Clearway Health more effective,” stated Rusty.

LOOKING AHEAD

Multi-framework approach and improved risk management

“We’ll continue driving adoption of the Thoropass features because they’re fulfilling an immediate need and are easy to adopt,” explained Rusty.

Planning for 2025 and beyond, Clearway Health is working towards its HITRUST certification and HIPAA third-party attestation. The evidence collected in the Thoropass platform is portable to other certifications, making it easy for Clearway Health to continuously build upon their already strong security posture.

LESSONS LEARNED

Find a vendor that tailors its services to you

According to Rusty, “because every company is unique, it’s important to adopt a partner that can satisfy your specific needs. What Thoropass brought to us was exactly what we needed: a shortcut to meaningful, relevant policies and procedures that are required to demonstrate our SOC 2 Type 1 assessment requirements.”