Overview
HITRUST is decommissioning CSF v11.0 and v11.3 according to the timeline below.
Notice and Timeline Details
Support of CSF v11.0 through v11.3
Effective as of the release of this advisory, maintenance support (i.e., CSF updates that would result in an errata release according to HAA 2021-005: CSF Versioning Policy) of v11.0 and v11.3 will be discontinued. Questions related to these library versions will continue to be addressed via support tickets until the libraries are removed from MyCSF on June 30, 2028. All assessments using v11.0 – v11.3 will remain in MyCSF.
Key Assessment Dates- Effective December 31, 2026, the ability to create new v11.0.0 through v11.3.2 r2 assessment objects will be disabled. All new r2 assessment objects created on or after December 23, 2026, must be created using HITRUST CSF v11.4 or later.
- Effective March 31, 2027, the ability to submit v11.0.0 through v11.3.2 r2 assessment objects to HITRUST for report processing will be disabled.
- Effective as of the release of this advisory, the QA Reservation System will not allow the selection of a submission date after March 31, 2027 when booking a reservation for an r2 assessment object using v11.0.0 through v11.3.2.
Note that the following will not be impacted by the above notice:
- Interim and Bridge Assessments will continue to utilize the same version of the HITRUST CSF that was used to create the original r2 Validated Assessment.
- Internal and external inheritance will continue to be available from v11.0.0 through v11.3.2 assessment objects until their expiration.
Additional Resources
For any additional questions, please contact our Support team or a HITRUST Customer Success Manager (CSM).