External Assessors are organizations that have been approved by HITRUST for performing assessment and services associated with the CSF Assurance Program and the HITRUST CSF, a comprehensive security framework that incorporates the existing security requirements of organizations.
External Assessors are critical to HITRUST’s efforts to provide trained resources to organizations of varying size and complexity to assess compliance with security control requirements and document corrective action plans that align with the HITRUST CSF.
Search for a HITRUST Authorized External Assessor below.
Internal Assessors are those personnel who facilitate the CSF Assessment process by performing in-house testing in advance of an External Assessor’s validated assessment fieldwork. Internal Assessors are in-house or outsourced CCSFPs who are typically positioned within, or engaged by, an assessed entity’s Internal Audit Department, but could also be positioned within or engaged by any department meeting specific objectivity requirements, resource qualification requirements, and approval by HITRUST (through a defined application process).
Internal Assessors are part of an “Internal Assessment Function.” This function will typically be an Internal Audit Department or a team of consultants, but is not required to be as long as specific objectivity, competence, and application approval requirements are met.Read More