HITRUST (Health Information Trust Alliance)

The HITRUST CSF is a framework designed and created to streamline regulatory compliance through a common set of security controls mapped to the various standards to enable organizations to achieve and maintain compliance.

CSF certifications are performed by certified assessors who produce reports detailing the maturity of specific systems within an organization. An organization may, for instance, certify only its EMR systems or only its radiology department.

HITRUST can be used across all sectors and throughout the third-party supply chain. Since its formation in 2007, 81 percent of US hospitals and health systems, and 83 percent of health plans leverage HITRUST. It's the most widely adopted control framework in the healthcare sector, according to a 2018 HIMSS survey.

The HITRUST Common Security Framework (CSF) is a certifiable security framework that provides organizations with a comprehensive, flexible and efficient approach to regulatory compliance and risk management.

A HITRUST Certificate is valid for 2 years. The first year is a full HITRUST assessment audit; year two is an interim HITRUST assessment audit.