Start a project
Menu
ServicesAll servicesCybersecurityCloud EngineeringApplication ServicesEnterprise PlatformsData & AnalyticsAI & Machine LearningInternet of ThingsMobilize Talent
PlatformsAll platformsIdentity and accessPrivileged access and secretsERP, HCM and financeCRM, ITSM and automationHealthcareInsurance and bankingData and integrationCloud and AIIndustrial, utilities and mainframeSkills matrix
Case studiesAll case studiesIdentity and accessPrivileged accessSecurity operationsCloud and infrastructureApplicationsERP and HCMCRM, ITSM and automationIndustry platformsData and analyticsAI and agents
IndustriesAll industriesEnergy, oil & gasHealthcare payersBanking & financial servicesInsurancePublic sectorManufacturingLocations
InsightsField notesLearning tracks
CompanyAbout CohashPortfolioSkills matrixCareersTrust and securityContact
Start a project
locations · spokane

Spokane treats patients from a wide rural region. Its patient records travel just as far.

Spokane calls itself a regional health care hub, and the WSU Health Sciences campus sends medical, nursing and pharmacy students into its hospitals and clinics. West of town, Fairchild Air Force Base and the firms that support it add defense data to the same local labor market.

Talk to an engineer
work in spokane6 services
4 local rules covered below
in short·15-second read

In Spokane we work with hospital systems and clinics, health sciences education programs, and companies supplying Fairchild Air Force Base and other defense customers.

The work includes identity governance for clinicians and students, access to health records under Washington's health information law, and CMMC-aligned controls for contractors. Cohash serves Spokane remotely from Frisco, Texas and comes to town for workshops and launches.

There is no Cohash office in Spokane. We're headquartered in Frisco, Texas, work with Inland Northwest organizations remotely and fly in for discovery workshops, clinical go-lives and readiness reviews.

Ask an engineer facts checked 2026-10-21 · 8 sources
rules
Washington breach law, RCW 19.255.010Health care information law, chapter 70.02 RCWConsumer health data, My Health My Data ActDFARS CMMC clause, 48 CFR
background
Every entitlement translated into business terms Auto-certified by policy unchanged and peer-aligned Ranked exceptions SoD conflicts first Revoke and verify proof logged with the decision
field note · 5 minThe access review nobody dreads
spokane by the numbers

What's specific about Spokane

Each figure comes from a public source, linked on the card.

01

Education and health services make up about 60.1 thousand of the 267.0 thousand nonfarm jobs in the Spokane-Spokane Valley metro, the biggest supersector in BLS data for September 2026 (preliminary).

source ↗ 02 6,500

Team Fairchild includes more than 6,500 active duty, Guard, Reserve and civilian members, and the 92nd Air Refueling Wing has 68 KC-135 tankers assigned, according to Greater Spokane Inc.

source ↗ 03 9,000

Greater Spokane Inc. calls health care the community's biggest economic driver and projects its Life Sciences Spokane initiative will bring over 9,000 jobs to the region by 2030.

source ↗ 04 1,200

WSU Spokane, the university's health sciences campus, houses the Elson S. Floyd College of Medicine and the colleges of nursing and pharmacy, with more than 1,200 students.

source ↗
who and what

Who we work with in Spokane, and the rules they work under

industries

  1. Hospitals and clinic networks

    Regional systems run one EHR across a main medical center and outlying clinics, with travel nurses and locum physicians rotating through. We set lifecycle rules from credentialing and staffing agency feeds, and build break-glass access that a privacy officer reviews within a day.

  2. Health sciences education

    Students work in clinical sites with supervised access to real patient records. We create student identities that pick up site-specific access for each rotation and lose it automatically when the rotation ends, with a record the school and hospital can both read.

  3. Defense and aerospace suppliers

    Small manufacturers and service firms supporting Fairchild and other DoD customers rarely have a dedicated security team. We scope a small CUI enclave, turn on MFA and privileged access controls, and write the system security plan an assessor will read.

regulations

  1. Washington breach law, RCW 19.255.010 ↗

    Washington gives businesses no more than 30 calendar days after discovering a breach to notify residents, and the same window for notice to the Attorney General when over 500 Washingtonians are involved. A law enforcement request or the need to restore system integrity can extend it.

  2. Health care information law, chapter 70.02 RCW ↗

    Washington's medical records statute limits disclosure without patient authorization to need-to-know cases and requires providers to maintain security safeguards under RCW 70.02.150. It applies alongside HIPAA and has its own civil remedies.

  3. Consumer health data, My Health My Data Act ↗

    Reaches apps, retailers and others outside HIPAA that collect or infer health information about Washington consumers, with compliance required of regulated entities since 31 March 2024. A clinic's HIPAA records are generally exempt, but its marketing and website tracking data may not be.

  4. DFARS CMMC clause, 48 CFR ↗

    Effective 10 November 2025 and phased in over three years. Once a contract includes it, a supplier needs the stated CMMC level in place before award and must keep it current for the life of the contract.

services

Most requested in Spokane

The services clients in Spokane ask us for most.

you are hereSpokane
01How do we keep travel nurse and locum accounts from lingering after their contracts end?

Feed contract end dates from your staffing system or agency into identity governance and make them mandatory at onboarding. Accounts then disable on the end date unless the manager extends them, and a weekly report flags anyone who still has EHR access without an active assignment.

02Can student access to patient records be limited to their rotation site?

Yes. We model each clinical site as an access scope and assign students to it for the rotation dates the school provides. EHR roles follow the assignment, so a student moving sites loses the old access the same day.

03Does Washington's health information law require anything beyond HIPAA?

In places. Chapter 70.02 RCW has its own disclosure rules, security safeguards requirement and civil remedies. Your privacy officer and counsel interpret it, and we document access controls so they can show compliance with both.

04What does a CMMC Level 2 project cost a 40-person supplier?

It depends on how spread out your CUI is and what you already have in place, so we start with a short scoping exercise. The main cost drivers are the number of users and devices inside the enclave, whether you need a new cloud tenant, and the third-party assessment fee.

washington

More cities in Washington

All 82 cities
SeattleCloud, aerospace & biomedical
sources 8 sources linked last checked 2026-10-21 content fingerprint 78b37117
  1. 01BLS, Spokane-Spokane Valley economy at a glancebls.gov ↗
  2. 02Greater Spokane Inc., military resourcesgreaterspokane.org ↗
  3. 03Greater Spokane Inc., Life Sciences Spokanegreaterspokane.org ↗
  4. 04WSU Spokane, aboutspokane.wsu.edu ↗
  5. 05RCW 19.255.010app.leg.wa.gov ↗
  6. 06Chapter 70.02 RCWapp.leg.wa.gov ↗
  7. 07Washington Attorney General, My Health My Data Actatg.wa.gov ↗
  8. 08Federal Register, DFARS CMMC rule (govinfo)govinfo.gov ↗
Reviewed by the Cohash team Product names are trademarks of their owners. how we handle facts and data →
next step

Tell us what you're running. We'll tell you what we'd do first.

A 30-minute working session with a senior engineer. No slides.

Book a working session See the case studies
useful to bring
  • The platform and the version you're on
  • Where you need to get to, and by when
  • What's custom: rules, plugins, integrations
  • Any audit finding or deadline driving it