April 13, 2020
SCREEN GP Americas, a division of the SCREEN Graphic Solutions Co. Ltd., owned by SCREEN Holdings Co, Ltd., today announced it has completed its SOC 2 (System and Organization Control) Type I audit, performed by KirkpatrickPrice, a licensed CPA firm specializing in information security and committed to thorough audits.
This attestation provides evidence that SCREEN GP Americas has a strong commitment to security and to delivering high-quality services to its customers by demonstrating they have the necessary internal controls and processes in place.
Additionally, SCREEN has completed its HIPAA Security Rule audit. This independent review also by KirkpatrickPrice, of SCREEN’s information security control structure demonstrates their compliance with the HIPAA Security Rule.
An SOC 2 audit provides independent, third-party, validation that a service organization’s information security practices meet industry standards stipulated by the AICPA, the American Institute of CPAs. During the audit, a service organization’s non-financial reporting controls as they relate to security, availability, processing integrity, confidentiality, and privacy of a system, are tested. The SOC 2 report delivered by KirkpatrickPrice verifies the suitability of the design of SCREEN Americas’ controls to meet the standards for these criteria.
“We know how important information security is to our customers,” said Ken Ingram, President of Screen Americas. “The entire SCREEN organization is constantly striving towards higher levels of security. It is one thing for us to say we provide secure services…it’s another to provide independent verification from an expert. We’ve gone through one of the most rigorous security audits in the industry, SOC 2, to demonstrate our commitment to compliance.”
“The SOC 2 audit is based on the Trust Services Criteria. SCREEN GP Americas has selected the security and confidentiality criteria for the basis of their audit,” said Joseph Kirkpatrick, President of KirkpatrickPrice. “SCREEN GP Americas delivers trust-based services to their clients, and by communicating the results of this audit, their clients can be assured of their reliance on SCREEN GP Americas’ controls.”
SCREEN GP Americas plans to pursue a SOC 2 Type II report in 2020, further demonstrating its commitment to compliance.
In performing SCREEN’s HIPPA Security Rule audit, KirkpatrickPrice, explained that The Health Insurance Portability and Accountability Act (HIPAA) sets a national standard for the protection of consumers’ Protected Health Information (PHI) and electronic Protected Health Information (ePHI) by mandating risk management best practices and physical, administrative, and technical safeguards. HIPAA was established to provide greater transparency for individuals whose information may be at risk, and the Department of Health and Human Services’ Office for Civil Rights (OCR) enforces compliance with the HIPAA Privacy, Security, and Breach Notification Rules.
The goal of the Security Rule is to create security for ePHI by ensuring the confidentiality, integrity, and availability of ePHI, protecting against threats, protecting against unpermitted disclosures, and ensuring workforce compliance.
KirkpatrickPrice is a licensed CPA firm, PCI QSA, and a HITRUST CSF Assessor, registered with the PCAOB, providing assurance services to over a thousand clients in North America, South America, Asia, Europe, and Australia. The firm has more than a decade of experience in information security by performing assessments, audits, and tests that strengthen information security practices and internal controls. KirkpatrickPrice most commonly performs assessments on SOC 1, SOC 2, PCI DSS, HIPAA, HITRUST CSF, GDPR, ISO 27001, FISMA, and FERPA frameworks, as well as advanced-level penetration testing. For more information, visit www.kirkpatrickprice.com, connect with KirkpatrickPrice on LinkedIn, or subscribe to our YouTube channel.
SCREEN Americas announces the sale of its Truepress Jet520HD to Art & Negative Graphics, Inc. of Lanham, Maryland.
With the installation completed, the technology is expected to aid in the promotion of the firm’s robust capabilities, particularly in the area of variable data output.