Healthcare technology · 640 staff, clinical software

Healthcare technology case study

[COMPANY NAME] — a placeholder name for a sample customer of this size and sector.

Sample data — placeholder company, sample figures throughout

Measured results

Figures recorded for this engagement in the sample data. Each metric names its unit and, where it changed, the starting point.

-41
Controls maintained in duplicate (controls)
120+
Business associate agreements tracked (agreements)
6 days
Access review cycle time (days, was 21)

The situation

Sample situation: one team carried HIPAA duties for clinical customers and SOC 2 duties for platform customers, with two separate spreadsheets and two audit dates.

The approach

Sample approach: map HIPAA safeguards and SOC 2 criteria to one control set, and keep business associate agreements in the vendor register with renewal alerts.

Measured outcome

Sample outcome: both audits run from the same control register, and access reviews finish in under a week each quarter.

Related case studies

Plan your audit calendar

Bring your framework list and audit dates; the demo walks through the register and evidence schedule for a company of your size.