FHAS earns HITRUST e1 certification for cybersecurity controls

Federal Hearings and Appeals Services, LLC said Tuesday it has earned HITRUST e1 certified status, a third-party validation meant to strengthen confidence in its data protection and risk management. The certification matters because FHAS handles sensitive medical, appeals and dispute-resolution work for health plans, agencies and other clients.

Why it matters: - FHAS handles sensitive information tied to medical review, utilization management, appeals and dispute resolution. - HITRUST e1 certification provides outside validation of cybersecurity and information protection controls. - The certification is designed to show that FHAS can manage information risk and protect sensitive data in line with evolving threat standards.

What happened: - Federal Hearings and Appeals Services, LLC said it earned certified status from HITRUST for cybersecurity and information protection on Aug. 26, 2026. - The company is based in Wilkes-Barre, Pa. - FHAS described itself as a nationally recognized provider of independent medical review, utilization management, appeals and dispute resolution services.

The details: - The HITRUST e1 Certification indicates FHAS met requirements defined by HITRUST, a cybersecurity assurance organization. - The certification reflects independent third-party testing and centralized quality assurance. - HITRUST’s Cyber Threat-Adaptive engine backs the certification process. - The framework is intended to align with threat intelligence and standards across NIST, ISO and OWASP. - FHAS said the certification confirms strong controls are in place to protect sensitive data and manage risk effectively. - James Bobeck, FHAS CEO, said stakeholders expect credible, validated assurance of the company’s commitment to protecting data, managing risk and maintaining trust. - Gregory Webb, CEO of HITRUST, said FHAS’s certification reflects a rigorous, proven assurance process and a proactive approach to cybersecurity and trust.

Between the lines: - FHAS is using the certification to reinforce trust with government, health-plan and healthcare customers that depend on compliant handling of regulated information. - The new validation adds another layer to FHAS’s existing quality accreditations, which already include NCQA Utilization Management Accreditation, URAC IRO Accreditation, URAC HUM Accreditation and URAC IDRE Designation. - The announcement also positions cybersecurity as part of FHAS’s broader pitch around clinical quality, regulatory compliance and impartial decision-making.

What's next: - FHAS will likely use the HITRUST certification as an ongoing proof point in client, regulatory and procurement discussions. - The company said the certification supports continuous alignment with current threat intelligence and changing security standards. - FHAS directs readers to more information and also listed its LinkedIn page.