Simplifying compliance and risk management

Compliance and Risk Management for Higher Education

Higher Education Regulations Supported

TruArx can help organizations comply with close to 500 regulations and standards. Typically, the ones below are most important to our higher education clients:

• PCI DSS
• FERPA
• HIPAA Security and Privacy
• HITECH
• FISMA
• SOX 404 (including COSO, COBIT, and 15 others)
• Identity Theft Red Flag
• State Privacy / Breach Notification Laws (over 75 laws)
• International Privacy Laws (over 40 laws, including EU Data Privacy and PIPEDA)

Customers Served

TruArx has the higher education experience to understand your business and technology issues. We are proud to serve:

• 2 of the top 5 university systems
• Universities and colleges around the US

Relevant Services

While TruArx provides a wide range of services to clients from SaaS to consulting, the ones below are most commonly requested by our higher education clients. Please click the service to learn more.

• TruComply
• TruPCI
• TruAware
• Managed Risk and Compliance Services
• Security Index Assessment (SIA)
• PCI DSS Assessments
• Disaster Recovery / Business Continuity Planning
• Other Consulting Services

Colleges and universities face unique challenges when it comes to data security and privacy due to the exceptional volume and variety of personal information they process as well as their relatively decentralized nature. For example, if you compare a typical university to a much larger global retailer, the university will typically have a more complex payments infrastructure due to the variety of places credit cards are accepted on campus, each of which is unique enough to have its own payments application. These challenges help explain why colleges and universities have accounted for more than one-third of the publicly reported information security breaches from 2005 to the present.

TruArx can help higher education institutions improve their data security and privacy practices and meet associated regulatory requirements through TruComply. TruComply is an easy-to-use IT governance, risk and compliance application which can be fully implemented within a few weeks.

Additionally, TruArx consultants can assist higher education clients by providing project-based services such as compliance / security assessments and disaster recovery and business continuity planning. Alternatively, for clients who lack the resources and skills to keep up with their compliance burdens, TruArx consultants can perform most IT compliance and risk management tasks through TruArx’ Managed Compliance and Risk Services.