Arthur Ashe, Change Healthcare and the Evolution of Risk and GRC Tech

In our latest In the Spotlight edition, Gerry Blass speaks with HASC’s Adam Blackstone about governance, risk and compliance (GRC) in health care. With decades of experience in information technology, Blass shares how privacy and security risks have spiraled over time. From the first well-known health care data breach, when Arthur Ashe’s health status was leaked to media in 1992, to last year’s Change Healthcare ransomware attack, the discussion shows how GRC technology has constantly raced to stay on top of the rising threats. And with the average data breach costing $9.8 million, the stakes have never been higher.

Blass is president and CEO of ComplyAssistant, a HASC Endorsed Business Partner. The firm began in 2002 as a security consultancy managing HIPAA compliance in health care. Evolving to meet the ever-increasing risks, ComplyAssistant is now a nimble GRC software and health care cybersecurity company on the leading edge of technology and customer service.

Speakers

Gerry Blass
President and CEO
ComplyAssistant

Adam Blackstone, moderator
Senior Vice President, Communications
HASC

 In the Spotlight is a series profiling HASC partners who are pursuing innovative, impactful work in their communities. To learn more or suggest a profile subject, contact Adam Blackstone.

In our latest podcast, Ivan Garcia, Calidad Medical, and Carlie Elwell, Servicon, discuss hospital supplier diversity from the perspective of diverse-owned vendors. The two share with HASC’s Adam Blackstone about doing business with hospitals and the challenges they face as diverse suppliers. 

Garcia and Elwell highlight the importance of educating hospitals about Assembly Bill 962 (2019), which requires many hospitals to report annually on their supplier diversity efforts. They also stress the value of building relationships between the two sectors and how hospitals can benefit from working with local-owned companies. 

The vendors underscore that supplier diversity isn't just about meeting metrics. It also means including different perspectives that reflect hospitals’ patient populations.