As a member of the Healthcare Privacy and Compliance team, Kristen Bertch combines her passion for HIPAA compliance and privacy with her deep technical knowledge. Kristen works with healthcare clients to ensure they have the appropriate data security controls in place, meet security standards and are HIPAA compliant. She provides counsel on data incident investigation and response, as well as other cybersecurity matters, and drafts HIPAA policies and procedures, taking into account each client’s specific business and organizational needs.
Kristen’s broad background of data privacy and cybersecurity also allows her to effectively advise clients on current and anticipated regulatory requirements for entities handling government data, including obligations related to the Cybersecurity Maturity Model Certification (CMMC) Program, FedRAMP and StateRAMP. With in-depth knowledge of data breach laws, widely recognized security standards and legally required security practices, she helps clients handling sensitive data, such as Controlled Unclassified Information (CUI), align security policies with regulatory standards, security frameworks and business goals.