HAA 2021-008: HITRUST MyCSF Enhancements – Status Dashboards

Overview 
This enhancement to MyCSF introduces several status dashboards to provide transparency regarding assessment statuses, open action items and their ownership, and next steps in the assessment workflow. These dashboards include: 

• Kanban View: A Kanban-style board that displays HITRUST CSF Validated Assessments as they move through each phase of the Validated Assessment Workflow. The board includes key details of each Validated Assessment, including: 

• Colored, circle badges depicting responsible parties for action items. 
• Summary of open items per organization. 
• Time elapsed in current phase. 
• HITRUST-assigned point of contact. 

• Matrix View: A spreadsheet-style view that displays the date the HITRUST CSF Validated Assessment has entered each phase of the Validated Assessment Workflow, as well as the number of days the assessment has been in each phase. 
• Assessment Details View: A dashboard of assessment metadata and status information, including: 

• Key dates along the assessment timeline. 
• Open items assigned to the Assessed Entity, External Assessor, and HITRUST. 
• Assessment scope. 

Status dashboards are being introduced as part of a larger suite of enhancements to the MyCSF platform. These enhancements are being announced collectively in a series of five Assurance Advisories. These Assurance Advisories should be reviewed in the following order as the concepts introduced in each Assurance Advisory build upon each other: 

• HAA 2021-007: HITRUST MyCSF Enhancements – New Assessment Workflows 
• HAA 2021-008: HITRUST MyCSF Enhancements – Status Dashboards 
• HAA 2021-009: HITRUST MyCSF Enhancements – Webforms 
• HAA 2021-010: HITRUST MyCSF Enhancements –Tasks and Notifications 
• HAA 2021-011: HITRUST MyCSF Enhancements – HITRUST CSF Report Format Changes 

Kanban View  

The Kanban View, which can be accessed from the ‘Views’ page of MyCSF, visually depicts HITRUST CSF Validated Assessments as they move through the phases of the new Assessment Workflow outlined in HAA 2021-007: HITRUST MyCSF Enhancements – New Assessment Workflows. The Kanban View contains a column for each phase of the Validated Assessment Workflow, and each accessible Validated Assessment is displayed as a card. As the assessment card moves through each phase of the workflow, the avatar at the top-right corner of the card corresponds to the color-coded group(s) who own the open action items required to be completed prior to moving to the next phase. Those icons are labeled as follows: 

• AE: Assessed Entity (blue avatar) 
• EA: External Assessor (purple avatar) 
• HT: HITRUST (red avatar) 

Assessed Entities and External Assessors may customize the Kanban View by configuring the data points and icons shown on their assessment’s cards. The available data points and icons include: 

• Organization Name 
• Assessment Name 
• Type of Assessment 
• External Assessor 
• Days in Current Phase 

• HITRUST QA Analyst 
• Open Action Items 
• Reservation Status 

After configuring the data points as desired, Assessed Entities and External Assessors may save their customized views for easy access. 

By default, the Kanban View will display all Validated Assessments assigned to the user. The view can be filtered to display a single assessment by searching for the Assessment Name. The view can also be filtered by the following: 

• Organization Name 
• External Assessor 
• HITRUST QA Analyst 

In addition to displaying Validated Assessments that are utilizing the new Validated Assessment Workflow outlined in HAA 2021-007: HITRUST MyCSF Enhancements – New Assessment Workflows, the Kanban View may also be toggled to show the legacy workflow states and the Validated Assessments utilizing the legacy workflow. 

Matrix View  

The Matrix View, accessed from the ‘Views’ page of MyCSF, is a spreadsheet-style view of accessible HITRUST CSF Validated Assessments. The Matrix View is accessed within MyCSF or downloaded as a ‘.CSV’ file. The columns of the Matrix View show dates the Validated Assessment has entered each phase of the new Assessment Workflow and the number of days the assessment has been in each phase. 

By default, the Matrix View will display all Validated Assessments accessible to the user. The view can be filtered to display a single assessment by searching for the Assessment Name. Similarly, to the Kanban View, the Matrix View can be toggled to show Validated Assessments utilizing the Legacy Assessment Workflow. 

Assessment Details Page 

Each HITRUST CSF Validated, Interim, Bridge, and Readiness Assessment has an Assessment Details Page accessed by clicking the assessment name within any assessment, or by clicking the assessment name on the Kanban View for Validated Assessments. The Assessment Details page is a dedicated page that summarizes information about the assessment including: 

• Assessment Data: Organization Name, Assessment Name, Submission Date, etc. 
• Assessment Scope: In-Scope Systems, Facilities and Outsourced Services (Validated and Readiness Assessments only). 
• Open Items: Open Tasks, Requirement Statements, and PQIs broken down by owner (Assessed Entity, External Assessor, or HITRUST). 
• Assessment Timeline: Timeline displaying the completed phases, current phase, and upcoming phases in the Assessment Workflow. 
• Days in QA: The number of days the assessment spent with each party (Assessed Entity, External Assessor, and HITRUST) during the QA phases. 

Implementation 
Assessed Entities and External Assessors will have access to view all HITRUST CSF Validated Assessments on the Kanban View and Matrix View starting on February 15, 2022. 

Effective immediately, all HITRUST CSF Validated, Interim, Bridge, and Readiness Assessments have an Assessment Details Page. 

Additional Resources 
A video walk-through of each dashboard is available on our videos page.