HITRUST CSF

HITRUST CSF is a certifiable framework that harmonizes HIPAA, NIST, ISO 27001, and other regulations into a single assessment. e1, i1, and r2 assessments represent increasing levels of rigor. Common i

HITRUST CSF is a certifiable framework that harmonizes HIPAA, NIST, ISO 27001, and other regulations into a single assessment. e1, i1, and r2 assessments represent increasing levels of rigor. Common in healthcare, payer, and large health-tech ecosystems.

Key controls

• 156 prescriptive controls across 19 domains (r2)
• Certified Assessor performs validated assessment
• HITRUST scores maturity of each control on a 5-point scale