Approach

Information Security

Security is everyone’s job at FHC, and we take our jobs very seriously.

FHC maintains independent external assessments against: 

• Federal Information Security Modernization Act of 2014 (FISMA) / National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53r5
• American Institute of Certified Public Accountants (AICPA) Statement on Standards for Attestation Engagements 18 (SSAE 18) Service Organization Controls (SOC) 1 Type II, and SOC 2 Type I

FHC has cross-mapped its NIST SP800-53r5 controls to and is compliant with:

• Cloud Controls Matrix (CCM)
• Health Insurance Portability and Accountability Act (HIPAA)
• Health Information Technology for Economic and Clinical Health Act (HITECH)
• HITRUST
• NIST Cybersecurity Framework (CSF)
• NIST Privacy Framework (PF)
• American Institute of Certified Public Accountants (AICPA) Statement on Standards for Attestation Engagements 18 (SSAE 18) Service Organization Controls (SOC) 2

FHC has consistently maintained an independently awarded “Advanced Rating” on BitSight scoring 800 against a possible 820 and in the top 10% of all companies. 

Advanced is the highest rating provided by BitSight and is defined as “strong security posture and lower risk”.  BitSight further defines organizations achieving an Advanced rating as “Entities in this category have strong security performance and are less likely to experience a data breach. They are the lowest risk. These entities demonstrate evidence of best practice implementation and consistent risk mitigation.”  FHC received a grade of “A” in all measured risk categories and a grade of “GOOD” for all risk vectors, both of which are the highest grades possible.

FHC maintains compliance with the following laws, regulations and standards:

• European Union (EU) General Data Protection Regulation (GDPR)
• Graham-Leach-Bliley Act (GLBA)
• Payment Card Industry Data Security Standards (PCI-DSS)
• Family Educational Rights and Privacy Act (FERPA)
• Internal Revenue Service (IRS) Publication (PUB) 1075
• Internal Revenue Service (IRS) Publication (PUB) 4812
• Privacy Act of 1974

Technology & Infrastructure

FHC’s technology is scalable and robust by design. Boasting multiple data center and contact center locations as well as a proven remote worker model, FHC’s network infrastructure is capable of rapid growth while maintaining stability. 

Some of the components that enable this include:

• Enterprise class firewalls providing IPS/IDS functions.
• 10g switching.
• Virtualization using VMWare’s ESX infrastructure.
• HP Flash storage arrays.
• The full M365 suite for operating systems as well as collaboration.

Our infrastructure is built for 3X growth without capital investment.

FHC has a variety of contact center and collection suites available for use and tailored to the needs of each unique customer. Our very talented in-house Development and Engineering staffs delight clients everyday with creative and sustainable designs to exceed expectations.  Go ahead, CHALLENGE US!

Outstanding Customer Care

Every FHC employee recognizes that our clients and their customers come first. From our initial interview to training to ongoing monitoring, we instill our core value of focused holistic customer care. FHC is committed to providing our clients with outstanding customer care through the following:

• A customized program to meet each client’s needs
• Dedicated staff educated on the specifics of your performance requirements
• Detailed custom reporting
• Unique workflows based on proprietary analytics
• Robust initial and continuous training

At FHC, we have seen that hiring the right people and providing robust initial training and continuous education results in high levels of customer satisfaction.