I currently work for an IT security company that is looking to expand our services offered to clients. Two avenues we are looking at is reviewing FISMA and HIPAA compliance for our clients. I have been tasked with looking at getting our auditors "HIPAA/FISMA" certified. My main question is towards HIPAA right now but if someone can speak up for FISMA as well, that would be great.
What is HIPAA certified? Is there an actually reputable company that offers a certification track that means something? All the research I have reviewed suggests that there is no actual badge that I can wear saying "I am now certified to review clients for HIPAA compliance". It just seems that many companies offer their own flavor of HIPAA certification tracks(one I looked out seem to have a tier structure even), but are they reputable? I don't see companies like SANS or Comptia offering something like this, so if there is a reputable company, I would like to know that too.
End goal/bottom line: Company wants to be able to be able to put down that we have individuals certified to review HIPAA (and FISMA) compliance on a client's network. Looks better for us on request for proposals which means better chances of winning contracts. Thank you.