Overview
Upon the release of CSF v11.9.0, HITRUST is announcing the deadline for creating and submitting e1 and i1 assessments using CSF v11.8.0 and earlier.
Details
- Between the release of v11.9.0 on September 24, 2026 and December 31, 2026, e1 and i1 assessments may be created using either v11.8.0 or v11.9.0.
- Effective December 31, 2026, the ability to create new e1 and i1 assessment objects, including rapid assessments, in MyCSF using CSF v11.8.0 will be disabled. All new e1, i1, and rapid assessments must be created using CSF v11.9.0.
- Effective March 31, 2027, the ability to submit e1 and i1 assessments using CSF v11.8.0 and earlier will be disabled.
- Effective as of the release of this advisory, the QA Reservation system will not allow the selection of a submission date after March 31, 2027 when booking a reservation for an e1 or i1 assessment object using v11.8.0 or earlier.
- As of March 31, 2027, any unsubmitted e1 and i1 assessment objects utilizing v11.8.0 and earlier will be marked with a MyCSF banner indicating that they cannot be submitted to HITRUST for processing. These assessments must be upgraded to v11.9.0 or later in order to be submitted to HITRUST.
e1 and i1 Assessment Baseline Impacts
With the release of v11.9, HITRUST is making changes to the e1 and i1 baselines. These adjustments are the result of multiple analyses focused on optimizing the e1 and i1 assessments. More information on why these changes are being made can be found in our v11.9 Baseline Change FAQ.
As a result of these changes, the size of the e1 baseline for v11.9 is 44 requirement statements. The size of the i1 baseline remains 182 requirement statements. In v11.9, it is still true that all requirement statements in the e1 baseline are included in the i1 baseline and all requirement statements in the i1 baseline are included in the r2 baseline.
Additional Resources
For any additional questions, please contact our Support team or a HITRUST Customer Success Manager (CSM).