HITRUST CSF readiness and assessment support.
We help healthcare organisations and their vendors choose the right HITRUST assessment, prepare evidence in MyCSF and get ready for the validated assessment.
Why HITRUST matters
-
Unified compliance
One assessment that maps to several frameworks.
-
Healthcare trust
A certification many US healthcare buyers recognise.
-
Prescriptive controls
Clear, specific requirements for each control.
-
Scalable path
Start with e1 or i1 and move to r2 as you grow.
Answer healthcare buyers once, across several frameworks.
US healthcare organisations often request HITRUST from their vendors, and a single assessment maps to requirements from sources such as HIPAA, NIST and ISO 27001.
The HITRUST CSF is a certifiable framework maintained by HITRUST that harmonises requirements from several sources into one set of controls. Validated assessments are performed by a HITRUST Authorized External Assessor and reviewed by HITRUST before a certification is issued.
The three HITRUST assessments
- e1 — Essentials Validated essentials assessment One year
- i1 — Implemented Validated implemented assessment One year
- r2 — Risk-based Validated risk-based assessment Two years
Start with e1 or i1 and move to r2 as you grow.
How we deliver HITRUST
-
Step 1: Readiness review
Map your controls to the HITRUST CSF and agree the assessment type and scope.
-
Step 2: Gap identification
List missing controls and prioritise remediation.
-
Step 3: MyCSF setup
Configure the assessment in MyCSF and organise evidence.
-
Step 4: Remediation
Implement missing security and privacy controls and update policies.
-
Step 5: Validated assessment
Support the HITRUST Authorized External Assessor during testing.
-
Step 6: HITRUST quality assurance
Respond to HITRUST quality assurance questions until the report is issued.
Trusted by
- Kavayah Cloud LLC.
- VirtueServe R&D Pvt. Ltd.
- Middleware Lab Inc.
- York IE Inc.
- Davinci Inc.
- Therapz Inc.
- Clouds Analytics Inc.
- RedKite Network LLP
- Yuva Infocare Pvt. Ltd.
- Fidelity Life Science
- Safebooks Global Pvt. Ltd.
- Xenett
- Cyfonix Pvt. Ltd.
- Interstride
- Symbion Coding Inc.