HITRUST CSF reports with Certification are valid for two years given the successful completion of an interim review, no breach has occurred and no significant changes have occurred relating to the scoped control environment. However, check with your business partner to ensure this meets their requirements as well.
Reference: CSF Assurance Program Requirements
Post your comment on this topic.