Compliance / HITRUST
HITRUST readinessWe help healthcare organizations and their vendors choose the right HITRUST assessment, close the gaps and prepare evidence for their external assessor.
HITRUST is the certification many health systems and payers ask their vendors for.
Our HITRUST self-assessment helps you gauge readiness and which assessment level to aim for.
Essentials. A one-year assessment of foundational cybersecurity practices. A practical first step.
Implemented. A one-year assessment of leading security practices for moderate-risk organizations.
Risk-based. A two-year, tailored assessment for the highest assurance requirements.
We handle readiness. Your assessment is performed by a HITRUST authorized external assessor and reviewed by HITRUST.
Match the assessment level to what your customers actually require.
Gap assessment against the requirements in scope.
Close gaps in policy, procedure and implementation.
Organize evidence so your assessor can test efficiently.
Coordinate with your external assessor through validation.
External assessor and HITRUST fees are separate.
Which assessment fits your customers' requirements, and what each one takes.
Download →Start with what your customers require. If they haven’t specified, e1 or i1 is usually a sensible first step.
e1 and i1 certifications last one year. r2 certifications last two years, with an interim assessment in between.
We focus on readiness. The assessment itself is performed by a HITRUST authorized external assessor.
HITRUST maps to HIPAA and many other frameworks, which is why healthcare customers use it as proof of security.
Book a 30-minute call. We’ll look at your customers’ requirements and your current program, and recommend a path.