advisories icon

Policy/Program Change Details 
This bulletin is to inform HITRUST Assessor Organizations about a change to the assurance process regarding the number of qualified (CCSFP) hours required for validated assessments. 

HITRUST Certified CSF Practitioner (CCSFP) resources must comprise 50% of assessment hours. This requirement is inclusive of QA hours. 

Rationale This change is to ensure the competency and quality of resources performing validation work. 

Timetable for Implementation 
Effective for all validated assessments submitted on or after April 1, 2019. 

For any additional questions, please contact our Support team or a HITRUST Customer Success Manager. 

<< Back to News Next Advisory >>

Subscribe to get updates,
news, and industry information.

The Only Certification Proven to Work

With a 99.41% breach-free rate among HITRUST-certified environments, HITRUST stands alone in cybersecurity assurance. From third-party risk to internal controls, trust the solution that reduces risk — and proves it.

Get Started
Chat

Chat Now

This is where you can start a live chat with a member of our team