Providers, Payors, PBMs, etc.

Healthcare organizations benefit from the HITRUST CSF – a scalable, prescriptive and certifiable framework specific to healthcare organizations. The MyCSF tool provides organizations of all types and sizes with a secure, web-based solution for accessing the CSF, performing assessments and managing compliance. HITRUST Academy educates individuals about information protection in the healthcare industry and utilization of the CSF to manage risk. The HITRUST Cyber Threat Intelligence and Incident Coordination Center provides cyber threat warning and intelligence services by informing them of general and sector-specific threats impacting the industry.

Texas Covered Entity Privacy and Security Certification

The Texas Health Services Authority (THSA) and HITRUST have partnered to develop and manage this program in accordance with Texas House Bill (HB) 300 passed in 2011. HITRUST has developed resources and tools to aid organization in understanding the requirements and preparing for and undergoing an assessment.

Read More

Vendors

Business associates can streamline the compliance process and reduce costs with a standardized approach to performing assessments and reporting security controls by utilizing the MyCSF tool to perform a CSF assessment and report once against a multiple sets of requirements and to multiple entities. HITRUST Academy provides individuals with the knowledge and skills to utilize the CSF and perform assessments as well as general knowledge and skills for protecting health information.

Get started on an assessment

You can begin reporting your information security posture to multiple healthcare industry partners using a standardized and user-friendly set of tools and methodologies in 5 easy steps.

Learn More

Consulting

Organizations can partner with HITRUST to provide trained resources to healthcare organizations of varying size and complexity to assess compliance with security control requirements, develop corrective action plans that align with the CSF, and provide remediation for organizations looking to be fully compliant with the myriad of authoritative sources incorporated into the HITRUST CSF. These organizations are called CSF Assessors and have met certain criteria as well as completed courses to become Certified CSF Practitioners.

Read more about becoming an assessor.

HITRUST Academy

HITRUST Academy offers the only training courses designed to educate healthcare security professionals about information protection in the healthcare industry and the utilization of the HITRUST Common Security Framework (CSF) to manage risk.

Read More

Letter from HITRUST CEO to Secretary Burwell at the U.S. Department of Health and Human Services

Published on: September 23, 2014 Letter from HITRUST CEO to Secretary Burwell at the U.S. Department of Health and Human Services

Read More

Monthly Briefing Recap

Published on: September 17, 2014 By: Joy Rios, Managing Partner at Practice Transformation Follow Joy on Twitter @HealthInfoSec A total of 112 incidents of cyber threats were reported in the past month, according to the August HITRUST briefing. In partnership with the U.S. Department of Health and Human Services (HHS) and the Federal Bureau of…

Read More

750 Organizations Want In on CyberRX Attack Simulations

Exercises Aim to Help to Improve Healthcare Preparedness, Response Published on: September 04, 2014 By: Susan D. Hall More than 750 healthcare organizations have signed up for the second round of cyberattack simulations to be carried out beginning in October by HITRUST and the U.S. Department of Health and Human Services. CyberRX 2.0 will be…

Read More

Go To News Archive

HITRUST Announces Cyber Threat XChange (CTX)

Published on: October 8, 2014 HITRUST announced today the HITRUST Cyber Threat XChange (CTX) to significantly accelerate the detection of and response to cyber threat indicators targeted at the healthcare industry. HITRUST CTX will automate the process of collecting and analyzing cyber threats and distributing actionable indicators in electronically consumable formats that organization’s of almost…

Read More

HITRUST Announces CyberRX 2.0 Program

Published on: September 3, 2014 HITRUST announced today that over 750 healthcare organizations have signed-up to participate in the healthcare industry’s cyber attack simulation exercise, CyberRX 2.0, to begin in October 2014. This overwhelming response is the result of the success and important lessons learned from the inaugural CyberRX exercise held in April 2014. It…

Read More

HITRUST HHS Monthly Briefing Press Release

Published on: March 13, 2014 HITRUST HHS Monthly Briefing Press Release

Read More

Go To Archive

Educational Webinar Series: MyCSF – A Customer’s Perspective

Published on: October 21, 2014 HITRUST is announcing a new webinar series that will provide participants with the opportunity to hear and interact with organizations using the HITRUST MyCSF to manage their information security programs and implement secure measures to comply with HIPAA, HITECH and other compliance requirements. To learn more about this webinar series,…

Read More

View Current Events View Past Events