Meet our Preferred Cybersecurity Providers
With cybersecurity a critical and ongoing threat to the health care field, the American Hospital Association (AHA) is committed to helping hospitals and health systems protect and defend themselves against cyber threats and attacks that can compromise enterprise operations and threaten patient care and safety.
The AHA established the AHA Preferred Cybersecurity Provider (APCP) Program as part of its continued commitment to support our members as they develop and implement their cybersecurity strategies and initiatives. Its goal is to identify trusted providers with vetted services to help AHA member hospitals and health systems prepare for and mitigate cyberattacks. The program connects AHA members to trusted, highly accomplished providers that can deliver the right services.
On the new AHA Preferred Cybersecurity Providers Bringing Value Podcast, John Riggi joins the providers to discuss how AHA Member hospitals and health systems can manage cybersecurity risks.
AHA Preferred Cybersecurity Providers
- Cyber Insurance Brokerage
- Cyber Incident Response
- Cyber Risk Management Services and Managed Detection and Response Services
- Cyber Firm Risk Management and Information Governance
- Cyber Risk Assessment, Privacy and HIPAA Compliance
- Managed Detection and Response (MDR)
- Healthcare Security Program, which includes MDR, Incident Response Planning, HIPAA Security Risk Assessment and Continuous Vulnerability Identification (CVI) services
- Medical Device and Health IoT Cybersecurity
- Network Security & Security Operations
- Complex Investigations including cyber, fraud and compliance investigation
- Vulnerability scanning + penetration testing + gap assessment
- Cyber Defense Payment System Risk Services
- Data Protection as a Service
- Medical Device Visibility, Security, and Management
- Secure Payroll and HCM Services
Aon's Cyber Solutions are world-class cyber security professionals building confidence in a world of uncertainty. Offering holistic cyber risk management solutions, unsurpassed investigative skills, and proprietary technologies, we help clients uncover and quantify cyber risks, protect critical assets, and recover from cyber incidents. Our clients call us - and we're at our best - when the stakes are high and the potential for damage is great. We are united by a common goal: to protect today and safeguard tomorrow.
Cyber security services are offered by Stroz Friedberg Inc. and its affiliates. Insurance products and services are offered by Aon Risk Insurance Services West, Inc., Aon Risk Services Central, Inc., Aon Risk Services Northeast, Inc., Aon Risk Services Southwest, Inc., and Aon Risk Services, Inc. of Florida and their licensed affiliates.
Services
- Cyber Insurance Brokerage
- Cyber Incident Response
BlueVoyant enables healthcare organizations to rapidly and efficiently defend against sophisticated cyber threats targeting both their own and their third parties’ infrastructure, applications, and data. Led by machine learning, AI-driven technology, and unmatched intelligence collections and analytics capabilities, BlueVoyant’s Ecosystem Cyber Defense (ECD) platform consolidates internal and external cybersecurity capabilities into a single solution, as well as being enhanced by an elite team of cybersecurity practitioners. BlueVoyant capabilities include Managed Detection and Response (MDR) for internal cybersecurity and Third-Party Cyber Risk Management and Digital Risk Protection (DRP) for external cybersecurity.
Services
- Cyber Risk Management Services and Managed Detection and Response Services
Censinet enables healthcare organizations to take the risk out of their business while protecting patient care with Censinet RiskOps™, the first and only cloud-based exchange that integrates and consolidates enterprise risk management and operations capabilities across critical clinical and business areas. Healthcare professionals and technology leaders created Censinet to enable a scalable method for identifying and managing risk specific to healthcare, such as data breaches, ransomware, and supply chain disruption. Trusted by leading healthcare providers, Censinet helps organizations address risk across their business, including vendors and third parties, patient data, medical records, research and IRB, medical devices, the supply chain, and more. Censinet works with IT, Security, Risk, and GRC teams within healthcare organizations of varying sizes, ranging from local clinics and regional hospitals to large healthcare systems, as well as important third-party vendors and suppliers that support providers.
In addition to its extensive base of healthcare providers and vendors, Censinet also works with leading healthcare research organizations, digital health innovators, and standards bodies to elevate the cybersecurity risk posture of healthcare providers and vendors. This work includes the HHS 405(d) Program and Task Group, MassChallenge HealthTech, KLAS Research, and more. Through its KLAS partnership, Censinet helped establish a first-look set of ‘Cybersecurity Transparent’ preparedness ratings for vendor products evaluated by KLAS in the healthcare space. All of these cybersecurity and risk collaborations leverage Censinet’s flagship offering, Censinet RiskOps, an integrated platform built upon a collaborative risk network of more than 8,000 vendors and 19,000 products serving the healthcare industry.
Services
- Cyber Firm Risk Management and Information Governance
- Cyber Risk Assessment, Privacy and HIPAA Compliance
Critical Insight defends your critical assets, so you can achieve your critical missions. We defend your organization with a personalized blend of MDR, managed, and professional services to assess, test, and monitor 24x7. IT teams get their day jobs back with the support of a full staff of experts for less than the cost of one employee. We make security a path to progress, from ensuring compliance to driving customer preference We’re committed to defending those who serve us all, so no organization goes without an evolved security strategy. Critical Insight. We Defend. You Thrive.
Services
- Managed Detection and Response (MDR)
- Healthcare Security Program, which includes MDR, Incident Response Planning, HIPAA Security Risk Assessment and Continuous Vulnerability Identification (CVI) services
Cylera is an IoT cybersecurity and intelligence company built in close partnership with healthcare providers.
Services
- Medical Device and Health IoT Cybersecurity
GM Sectec is a leading cyber defense and managed security services provider, laser focused on risk mitigation, threat prevention and incident response with operations in over fifty countries worldwide and over 50 years of continuous service. GM Sectec leverages our core domains and capabilities in Compliance, Risk & Governance, Managed Security Services, and Fraud Prevention Services to address two inter-related healthcare challenges: Data Backup & Recovery and Payment & Revenue Services.
Hospitals manage, store and access ePHI across a considerable number of healthcare applications, medical devices, and payment and collaboration systems. As stated in the HIPAA Security Rule (164.308), institutions are required to backup and recover 100% of the ePHI. GM Sectec’s DataPreserve, powered by Metallic, is Data Protection as a Service, and provides healthcare institutions the ability to securely backup and recover ePHI for any system, application, and computing environment. Our DataPreserve managed services provide for the deployment, prioritization, recovery testing, and on-going operational surveillance and reporting. DataPreserve can improve healthcare services to maintain resilient operations, defend against ransomware, and comply with the HIPAA Security Rule.
Healthcare institutions have a high priority to defend against cyberattacks that can impact and disrupt critical payment systems and prevent fraudulent payment schemes. GM Sectec’s Cyber Defense Payment Risk Services combines our compliance domain certifications and experience in HIPAA, HiTrust, ISO, NIST and PCI, Cybersecurity managed services, and fraud investigation and prevention services. These services help our healthcare clients to minimize the cyber risk to payment systems, investigate potential cyber and payment system compromises, and provide guidance on strengthening payment systems’ cyber security and fraud capabilities.
Services
- Cyber Defense Payment System Risk Services
- Data Protection as a Service
Fortinet Healthcare solutions provide top-rated network and content security, as well as secure access products that share intelligence and work together to form a cooperative fabric. Founded more than 20 years ago in Sunnyvale, California, Fortinet continues to be a driving force in the evolution of cybersecurity and the convergence of networking and security. Securing people, devices, and data everywhere is our mission.
Services
- Network Security & Security Operations
FTI Cybersecurity is a global leading provider of independent cyber and risk management advisory services with a core offering focused on cyber readiness, incident response, and complex investigation and litigation. We build a safer future by helping businesses understand their own environments, harden their defenses, rapidly and precisely hunt threats, holistically respond to crises, and recover operations and reputation after an incident. Our multidisciplinary group of industry-experienced professionals maintain relationships with intelligence agencies, regulatory authorities, and private agencies to better support our clients in their prevention, response, and investigation of cyber threats and incidents. Many of our professionals have backgrounds and experience in healthcare, both with hospitals as well as medical device and software companies, and carry a keen understanding of the cyber threats and challenges facing American hospitals today.
Services
- Complex Investigations including cyber, fraud and compliance investigation
- Vulnerability scanning + penetration testing + gap assessment
Securing the clinical environment requires a new security strategy and coordinated approach as IT, OT, IoT, and physical systems converge and the threat of bad actors exploiting vulnerabilities across new and old infrastructure is increasing.
IT also requires detailed knowledge of each and every medical device, its proprietary protocols, and a comprehensive understanding of medical workflows. In a network with hundreds of different device types, thousands of devices from different manufacturers, and a mix of protocols and operational parameters it can be overwhelming to protect.
Medigate provides the solution Healthcare needs, one that covers the entire risk spectrum they face while ensuring the usability of these devices without compromising security. This challenge requires the type of specialized approach for healthcare that Medigate employs and gives you the confidence to see, secure, and manage all of the devices connected to your network. By turning the associated data into a powerful resource you can end the compromise between security and usability – put simply, it allows you to connect with confidence.
Services
- Medical Device Visibility, Security, and Management
Paycom creates technology that simplifies life for employees. Through its innovative solutions, Paycom transforms the workplace by giving employees direct access to their data in one easy-to-use software. From onboarding and benefits enrollment to talent management and more, Paycom streamlines processes, drives efficiencies, increases data integrity and gives employees power over their own HR and payroll information through a self-service app. Paycom tools include: Beti®, Employee Self-Service®, Manager on-the-Go®, Applicant Tracking, Ask Here, Benefits Administration, Clue®, Compensation Management, Direct Data Exchange®, Documents and Checklists, Expense Management, Government and Compliance, Onboarding, Paycom Learning, Paycom Surveys, Performance Management, Personnel Action Forms, Position Management, Push Reporting®, Scheduling, and Time and Attendance.
In addition, Paycom’s Global HCM™ offering can now serve users in more than 180 countries and is available in 15 languages and dialects.
Services
- Secure Payroll and HCM Services
AHA Rigorous Due Diligence and Selection Process
When a hospital or health system selects a service from a company that has achieved APCP status, it can be confident that the organization has met the AHA’s highest standards.
Are you a cybersecurity provider that has a solution that can help AHA Members?
Let’S Talk.
Want To Learn More About Apcp?
Please provide the following information and someone from our team will be in touch to help match you with a preferred solution.