Meditology is a professional services company with an exclusive focus on healthcare IT. Our reputation for client service excellence is based on the quality of our work products combined with the professionalism, approach, and innovative solutions we bring to our engagements. In addition to consulting services, our experienced professionals can help augment your team with high-quality and reliable interim support.
Onsite Health Diagnostics has relied on Meditology Services for HIPAA security risk assessment and penetration testing since 2013. Meditology’s information security services have provided OHD’s customers and business partners with confidence in the seriousness with which we take the our responsibility to protecting their highly sensitive data. We have been more than pleased with Meditology’s professionalism, diligence and responsiveness, and we look forward to working with them for years to come. Since our founding, OHD has been dedicated to exceptional client service, providing stress-free employee health screenings and workforce health data analytics. Our clients, who include Fortune 500 corporations, hospital systems, financial institutions, state & local governments and small businesses alike, rely on OHD’s commitment to privacy and security when it comes to their employee health data.
Kyle Alexander, CEO
My original experience with Meditology was during a risk assessment at a different healthcare organization. I was impressed with Meditology's team, the professional manner in which they interacted with our stakeholders, and the comprehensiveness of the final deliverable. Upon joining Avanti, I saw the need for a similar, thorough review of our security controls and I immediately thought of Meditology for the job. Meditology's professionals completed the risk assessment with the same professionalism and quality as my first experience. Again, the team met my high expectations throughout the engagement and even went above and beyond the original contracted scope to assist with some last minute requests that provided additional value to me and the organization. I anticipate Meditology will continue to be a trusted adviser for my future security needs.
Jason Cervantes, Chief Information Officer
Avanti Hospitals, LLC
As a health information exchange (HIE), we are a highly customer-focused organization –– and we recognize this same orientation in a consulting partner. Meditology came to us recommended by our members and well-respected in its service community. They were readily able to evaluate our policy and security framework, and identify areas of key focus. We particularly appreciated their knowledge around HIPAA and our statewide HIE. With their help, we created an entire array of organizational policies. Meditology also conducted a security assessment that demonstrated we had appropriate safeguards in place for robust exchange. This has helped assure our member hospital/health systems, healthcare insurers, and ambulatory practices. Naturally, the effort has had an important influence on our service procedures. We look forward to continued work with Meditology for our consulting and ongoing risk-assessment needs.
Daniel Wilt, Senior Director of Information Technology and Chief Information Security Officer
Pam Clarke, Senior Director of Member Services and Policy
HealthShare Exchange of Southeastern Pennsylvania
WellStar had not previously worked with Meditology Services in the past, but I was familiar with them by reputation. I engaged Meditology to assist WellStar in the development of information security related business processes, policies, and procedures that align with HIPAA, ISO 27001, and ISO 27002. Meditology's team delivered the project on-time and on-budget to a high level of quality and fully met my expectations for the project. I was impressed by their professionalism and attention to detail, and have already engaged them to conduct follow-on work. The engagement delivered critical foundations necessary to execute with confidence.
William R. Deforest, IT Compliance Leader
Wellstar Health System
Meditology was nothing but professional from start to finish for the project with McLaren. We outsource our IT services and they worked closely with us, and the vendor, to collect required documentation, they accepted input from both sides and explained their conclusions once findings were verified. The team's project time lines, status reports, and weekly follow up calls kept us all on track for a timely completion. Meditology addressed the significant risk areas in a straightforward manner without making respondents feel defensive, and they freely offered information about industry best practice. The team has definitely won the confidence of our Executive group and expect we will be asking Meditology for more work in the future.
Denise Dach, Corporate Director of Compliance
McLaren Health Care
Baptist originally looked at several different companies to perform a security risk assessment. We chose Meditology mainly for their demonstrated knowledge and understanding of HIPAA, ARRA/HITECH and established security standards. They were unfailingly professional throughout the information gathering and data gathering processes, kept to their timeline and verified the results that they found. The reports produced were accurate and easy to understand, with appropriate benchmarking to other health care organizations and the security industry as a whole. Most importantly, they provided concrete and achievable suggestions to help mitigate the risks identified.
Barbara Anson, CISO
Baptist Memorial Health Care Corporation of Memphis, TN
One of NASCO's key controls for security management is the annual revalidation of security access to the primary claims processing system, to ensure appropriateness of access based on role. NASCO engaged Meditology to perform the security revalidation based on our prior, positive experience working with the firm's leadership and we are pleased we did. Although the project had tight constraints, Meditology exceeded our expectations with high-quality deliverables completed on-time and on-budget. Meditology also provided valuable guidance and suggestions for making the annual security access revalidation process more cost-effective and efficient.
Lauret Howard, SMP
NASCO, Vice President, Strategy, Brand and Risk Management
At Salem Health we consider Meditology Services a trusted partner. We have partnered with Meditology to fill multiple specialized positions and have been very satisfied. Meditology’s leaders have personal experience in the daily work we perform in health care. Because of this, they understand the needs we have and are able to provide the correct resources at the right time.
There are many firms to choose when looking for consultants. However, my experience has shown that Meditology Services is a preferred consulting firm. As our partner assisting us on many of our top priority projects, it is clear that their goal is to provide an exceptional experience to their customers.
Jason Stark, MPA, HA
Project Management Office Manager, Salem Health
We were looking for a partner to assist us in taking our risk management program to a new level. We chose Meditology because of their track record in healthcare and reputation in the region. Meditology's security operational experience, coupled with their knowledge of HIPAA, Meaningful Use, HITRUST, PCI and other security requirements was invaluable to help us map out our path forward. The project was professionally managed from start to finish and Meditology was able to effectively communicate with senior leadership to help us advance our program. We continue to look to Meditology to provide additional insight and assistance for security and privacy matters for our organization.
Large Mid-Atlantic Health System
We engaged Meditology to assist us with Security Risk Assessment services on two different occasions. They were highly knowledgeable and extremely professional throughout the duration of each project, and the quality of the final deliverables they provided was exceptional. Meditology’s healthcare focus and core competency of Information Security and Privacy were indispensable to the engagement. Their deep knowledge of the HIPAA and HITECH regulations, as well as the Common Security Framework and supplemented by industry operational experience of their team members, added huge value to the assessment. Meditology was able to address significant risk areas in a straightforward manner and was able to provide practical examples and insight on how to go about correcting issues. We will definitely call upon Meditology again when the need arises.
Chief Technology Officer & CISO, Kelsey-Seybold Clinic
Feel free to contact us at anytime. We welcome the opportunity to have a conversation with you, and if by rare occasion we can't help out, we'll be glad to point you in the direction of somebody who can.