Each HITRUST External Assessor Organization (“EA Organization”) has been through a vetting process and demonstrated the ability to perform HITRUST CSF Assessments. The HITRUST vetting process includes reviewing policies and procedures and the background of the individuals performing the assessments. All EA Organizations are required to maintain at least 5 CCSFPs and 2 CHQPs employed within their organization at all times.
Obtaining an EA Organization status indicates that the EA Organization has met all HITRUST requirements to perform HITRUST CSF Assessments and has demonstrated an apparent ability to perform HITRUST CSF Assessments successfully. Although HITRUST strives to ensure that the list of EA Organizations on this webpage remains current and that the EA Organizations continue to meet our standards, HITRUST cannot guarantee that any EA Organization will be successful in their role as an EA Organization on any specific engagement.
This is where you can start a live chat with a member of our team