Preparing for a HITRUST CSF Assessment

Step 1: Form Relationships with HITRUST and the Assessor During a HITRUST CSF engagement, your organization must build relationships. If youâ&#x20AC;&#x2122;re pursuing a Validated Assessment or working towards achieving certification, you must first develop a relationship with HITRUST directly. You also must develop a relationship with an assessor firm, such as KirkpatrickPrice. The assessor firm must be an approved firm by HITRUST. This three-way relationship will be a key component to your HITRUST CSF compliance journey.

Step 1: Form Relationships with HITRUST and the Assessor

Turn static files into dynamic content formats.

Create a flipbook

Preparing for a HITRUST CSF Assessment

Published on Jul 31, 2020

kirkpatrickprice

If you’re managing healthcare data, it’s critical from a business and reputational standpoint to protect yourself from risk and maintain a strong relationship with your clients who are also trying to mitigate their risks. HITRUST certification is a great way to ensure this is happening. The HITRUST Common Security Framework, or CSF, is a certifiable framework that provides organizations with a comprehensive, flexible, and efficient approach to regulatory compliance and risk management. The framework was developed to provide a solution to increasing regulatory scrutiny, increasing risk and liability associated with data breaches, inconsistent implementation of minimum controls, and the rapidly changing business, technology, and regulatory environment. It is a healthcare industry standard that was built from what works within other standards and authoritative sources, like ISO 27001/27002, HIPAA, PCI DSS, and NIST 800-53, just to name a few.

Articles inside

Preparing for a HITRUST CSF Assessment

Articles inside

Ready to Work with KirkpatrickPrice?

Step 4: Establish and Narrow Your Scope

Step 3: Identify Your Level of Readiness

Step 2: Educate Yourself on the CSF and the Assessment Process

Step 1: Form Relationships with HITRUST and the Assessor

Step 5: Determine What Type of Assessment and Report You Need

An Introduction to the HITRUST CSF