Advisories

HAA 2019-007: Updated PRISMA Attribute Weights

Written by HITRUST | Mar 15, 2024 5:00:25 AM

Policy/Program Change Details 
The point values, or “weightings”, of the five levels of HITRUST’s PRISMA maturity model are changing. The below graphic shows that the Policy weight is being reduced to 15 points, the Procedure weight is being reduced to 20 points, the Implemented weight is being increased to 40 points, the Measured weight is being reduced to 10 points, and the Managed weight is being increased to 15 points. 

Rationale 
These updated weights better reflect the value that each maturity level brings to an organization’s risk management stance. For example, the increased weighting of the Implemented level (which is now worth double any other single level) aligns to the priority that mature organizations place on the implementation and operation of controls relative to other maturity levels. 

Timetable for Implementation 
The updated weights will be effective on all validated and self-assessment objects created on or after December 31, 2019. Assessment objects created prior to December 31, 2019, will continue to observe the current PRISMA attribute weights. Interim assessments performed after December 31, 2019, will observe the PRISMA weights in effect at time of performance of the original validated assessment.