Andrew Hicks, CISA, CRISC, CCSFP, HCISPP, MBA

Experience

As the National HITRUST Practice Leader, Andrew Hicks contributes nearly 20 years of experience to Frazier and Deeter’s Process, Risk & Governance (PRG) Practice. He specializes in working with organizations to adopt, implement and manage information security programs, specifically regarding HITRUST, HIPAA regulatory compliance, risk management and SOC examination procedures. Andrew’s deep knowledge of the healthcare marketplace enables FD to enhance its existing assessment and advisory services to overcome information security compliance and regulation challenges.

Andrew focuses on the development of consistency and quality-based assessment procedures with the intent to improve the customer experience. He has managed more than 300 HITRUST engagements and has been repeatedly appointed to HITRUST Assessor, Quality and Marketing Councils. He has expertise in navigating the regulatory and compliance pressures associated with healthcare service providers and organizations, including payers, providers and clearinghouses.

Before joining the firm, Hicks was Vice President of Healthcare Services at Coalfire, where he successfully built a national practice by developing sales, marketing and delivery strategies centered on solving customer challenges. Earlier in his career, he worked with a variety of organizations and industries in the areas of information system security and compliance.