Results Healthcare Managed security
A stronger foundation for sensitive data
A medical credentialing company moved from personal email and no documented safeguards to a security score of 88.
What we delivered
- Managed security
- Managed email migration
- Multi-factor authentication and encryption
- Security awareness training
- HIPAA policy set
A medical credentialing company. Anonymized, per the confidentiality terms of the engagement.
Before
Protected health information handled on personal email accounts instead of a company-managed domain. No documented HIPAA safeguards. A security score of 24 out of 100.
What we did
A year of managed security: migrated onto a managed email domain, multi-factor authentication and encryption enforced everywhere patient data lives, company-wide security training, and the HIPAA policy set they did not have, written from scratch.
After
HIPAA-aligned control coverage from 25% to 76%. Security score from 24 to 88, against a 74 industry average. Estimated breakout time grew from 20 minutes to 156. Training completion and safe-user rate: 100%.
Timeline
- Starting point
Security score of 24. Patient information on personal email. No documented safeguards.
- During year one
Managed email domain, multi-factor authentication and encryption, company-wide training, and a HIPAA policy set written from scratch.
- Fourth quarter
245 security events managed, including 42 threats blocked and 15 phishing emails stopped before reaching an inbox.
- One year in
Security score of 88. HIPAA-aligned control coverage of 76%. Training completion of 100%.
“Castile came in, explained everything in clear terms, and took full ownership of our cybersecurity needs. Now I don’t even have to think about it; I know we’re protected.”
The security score, industry average, and event counts come from the security platform’s reporting. HIPAA-aligned control coverage and the containment-time estimate are Castile’s own assessments. Not a legal determination of HIPAA compliance.
Handle sensitive information?
Every managed plan includes 24/7 security monitoring and management, training, and a quarterly review you can show your clients and auditors.
Not ready to talk? Run the free scan.