Wesley Lutz

Product Manager

wesley lutz

A prescriber holding a pen types on a laptop as multiple digital Rx prescription icons appear projected above the keyboard

EPCS Certification Requirements

EPCS requires both platforms and prescribers to meet DEA rules for identity proofing and two‑factor authentication. Digital certificates—such as IdenTrust’s FBCA‑cross‑certified option—cover identity verification, but platforms must pair them with their own two‑factor method. IdenTrust supports three approaches: platform‑managed authentication, hardware tokens, and mobile app authentication. Platforms should plan certificate strategy early, consider multiple authentication methods for diverse clinical settings, and help prescribers select the correct certificate type. These choices have long‑term impact on compliance, workflow, and audit readiness.
• Wesley Lutz
Digital Certificates
CMMC 2.0

Role of PKI in CMMC 2.0 Compliance

The CMMC program strengthens cybersecurity across the Defense Industrial Base by setting standards for protecting FCI and CUI and promoting accountability, resilience, and trust. DoD contractors rely on IdenTrust ECA Medium Assurance certificates to meet these expectations, using them to authenticate users and devices, protect sensitive data through encryption, maintain data integrity, and enforce access control aligned with frameworks like NIST SP 800‑171. As CMMC 2.0 formalizes tiered requirements and assessments, establishing trusted identities becomes the foundation for securing systems and supporting compliant operations. For organizations working with the DoD, mature certificate practices are essential to maintaining a secure and defensible cybersecurity posture.
• Wesley Lutz
CMMC Compliance
Picture of PII information of a made up person on a screen

Certificate Authority & Identity Assurance

Identity Proofing regarding Assurance Levels with a Certificate Authority
• Wesley Lutz
Identity Proofing