HAA 2026-001 - Assessment Handbook v1.2 Release

Overview

Version 1.2 of the Assessment Handbook is now available on the HITRUST website, and includes updates regarding:   

• Procedures to be performed when evidence is generated by an intermediate software platform in Chapter 11.3 Working Papers & Evidence. 

• Additional criteria in Chapter 11 Testing & Evidence Requirements to clarify HITRUST’s testing and evidence expectations. 

• HITRUST certification report status descriptions in Chapter 15.1 HITRUST Reporting 

• Clarification of inheritance eligibility based upon the certification status and certification expiration dates in Chapter 12.2 Reliance on Assessment Results Using Inheritance. 

• Ability to use an e1 or i1 in lieu of an interim assessment in Chapter 15.4 Interim Assessment. 

   For a detailed log of the changes, see HITRUST Assessment Handbook, Appendix B Summary of Changes. 

Timeline 

HITRUST expects all Assessed Entities and External Assessors to maintain awareness of the Assurance Program requirements through this Assessment Handbook. HITRUST QA will begin enforcing any new or updated criteria in version 1.2 of the Assessment Handbook on assessments submitted as of April 15, 2026.

Additional resources