Skip to main content

(2025 December 18) Epic Quarterly Attestation: 2025 update and community partner support

Updated this week

The Epic Quarterly Attestation assessment automates and streamlines your quarterly Epic compliance submissions. Epic periodically updates its cybersecurity policies, and in 2025, they updated their information security requirements. To ensure your continued alignment, we’ve updated the Epic Quarterly Attestation assessment starting with your January assessment.

Additionally, Epic requires you to attest on the behalf of your community partners. Censinet’s Epic Community Partners feature allows you to manage attestations from Epic Community Connect or EpicCare Link partners.

What's new

We’ve added a set of updates that align the assessment with Epic’s latest requirements:

  • Aligned with Epic’s latest revision to meet Your Organization’s Responsibilities for Information Security: All questions, categories, and reports now reflect Epic's latest requirements.

    • New compliance domains: Updated categories include Access Security, User Provisioning and Activity Monitoring, Third-Party Integrations, Incident Reporting, Physical Security, Infrastructure Security, and Epic Application and Infrastructure Configuration.

  • Updated summary reports: Summary reports mirror Epic’s PDF format, making it easy to complete and submit your reports to Epic.

  • Community Partner assessments: You can use this feature to attest that your Community Connect or Link partners have controls in place, and remediation is ongoing. View their completed summary reports to validate compliance before submitting your own attestation.

ℹ️ Learn more

Did this answer your question?