Providers, Payors, PBMs, etc.

Healthcare organizations benefit from the HITRUST CSF – a scalable, prescriptive and certifiable framework specific to healthcare organizations. The MyCSF tool provides organizations of all types and sizes with a secure, web-based solution for accessing the CSF, performing assessments and managing compliance. HITRUST Academy educates individuals about information protection in the healthcare industry and utilization of the CSF to manage risk. The HITRUST Cyber Threat Intelligence and Incident Coordination Center provides cyber threat warning and intelligence services by informing them of general and sector-specific threats impacting the industry.

Texas Covered Entity Privacy and Security Certification

The Texas Health Services Authority (THSA) and HITRUST have partnered to develop and manage this program in accordance with Texas House Bill (HB) 300 passed in 2011. HITRUST has developed resources and tools to aid organization in understanding the requirements and preparing for and undergoing an assessment.

Read More

Vendors

Business associates can streamline the compliance process and reduce costs with a standardized approach to performing assessments and reporting security controls by utilizing the MyCSF tool to perform a CSF assessment and report once against a multiple sets of requirements and to multiple entities. HITRUST Academy provides individuals with the knowledge and skills to utilize the CSF and perform assessments as well as general knowledge and skills for protecting health information.

Get started on an assessment

You can begin reporting your information security posture to multiple healthcare industry partners using a standardized and user-friendly set of tools and methodologies in 5 easy steps.

Learn More

Consulting

Organizations can partner with HITRUST to provide trained resources to healthcare organizations of varying size and complexity to assess compliance with security control requirements, develop corrective action plans that align with the CSF, and provide remediation for organizations looking to be fully compliant with the myriad of authoritative sources incorporated into the HITRUST CSF. These organizations are called CSF Assessors and have met certain criteria as well as completed courses to become Certified CSF Practitioners.

Read more about becoming an assessor.

HITRUST Academy

HITRUST Academy offers the only training courses designed to educate healthcare security professionals about information protection in the healthcare industry and the utilization of the HITRUST Common Security Framework (CSF) to manage risk.

Read More

Industry Working to Support CSF Alignment with AICPA’s SOC 2 Reporting

HITRUST and the American Institute of Certified Public Accountants (AICPA) are collaborating to establish SOC 2 reporting for healthcare organizations that would leverage and align the HITRUST Common Security Framework (CSF) as additional suitable criteria. HITRUST is looking for individuals interested in serving in an advisory role to provide input and feedback in support of…

Read More

How Texas is Boosting HIPAA Compliance

April 30, 2014 – A new voluntary privacy and security certification program for covered entities in Texas aims to bolster compliance with HIPAA and state regulations – and perhaps help organizations avoid federal sanctions. The Texas Health Services Authority developed the new Texas Covered Entity Privacy and Security Certification in partnership with the Health Information…

Read More

Children’s Medical Center Named first Hospital to Receive Texas Covered Entity Privacy and Security Certification

DALLAS (April 22, 2014) –At the HITRUST 2014 conference today in Grapevine, Texas, Children’s Medical Center Dallas announced it is the first and currently the only hospital in Texas to receive the Texas Covered Entity Privacy and Security Certification by the Texas Health Services Authority (THSA) and the Health Information Trust Alliance (HITRUST). By achieving…

Read More

Go To News Archive

Managing Business Risk with HITRUST (Webinar)

Managing Business Risk with HITRUST (Webinar)

Read More

HITRUST CSF Assurance Program

HITRUST CSF Assurance Program

Read More

HITRUST CSF Assurance Program Meaningful Use Webinar

HITRUST CSF Assurance Program Meaningful Use Webinar

Read More

View Current Events View Past Events