• Yes, for control requirements that are not associated with required CAPs, they must have been in place for 90 days in order to be scored and they must have been tested within in the preceding 90 days from submission to HITRUST. This should not be an issue as the controls should have been scored during the supporting full assessment.
  • Changes in scores for control requirements that are associated with a required CAP are considered demonstration of progress and are not subject to the 90-day rule.


Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.

Post your comment on this topic.

Post Comment