HITRUST has established the Common Security Framework (CSF),
a certifiable framework that can be used by any and all organizations that create, access, store or exchange personal health and financial information.


Utilizing a common set of information security requirements, the program delivers simplified compliance assessment and reporting for HIPAA, HITECH, state, and business associate requirements.

Learn more about CSF Assurance

The only tool available that allows IT security and compliance professionals to search for solutions based on the HITRUST CSF. The Products and Services Guide is available through HITRUST Central.

Learn more about the Guide

Education and training courses that focus on HITRUST, privacy and security, the CSF and CSF certification. The initial offering from the Academy is the 5-day course HITRUST Training for Practitioners.

Learn more about HITRUST Academy

News Events