Assurance Category: Assurance Quality Advisories Archive

February 12, 2016
HAA 2016-002: HITRUST CSF Assurance Program requirement change related to timely submission of corrective action plans that are required as part of certification report issuance.
Impacted Policy/Program Name CSF Assurance Program Requirements Publication Date January 12, 2016 From Ken Vander Wal, Chief Compliance Officer, HITRUST Advisory Type Requirement Change...

January 12, 2016
HAA 2016-001: Clarification of HITRUST CSF assurance requirements related to an assessed entity outsourcing selected HITRUST CSF controls.
Impacted Policy/Program Name CSF Assurance Program Requirements Publication Date January 12, 2016 Effective Date Immediate: This bulletin is to clarify existing policy. From Ken...

March 11, 2016
HAA 2016-003: HITRUST CSF Assurance Program Change Related To The Addition Of A Required Control For Certification In HITRUST CSF V8.
Impacted Policy/Program Name CSF Assurance Program Requirements Date January 12, 2016 From Ken Vander Wal, Chief Compliance Officer, HITRUST Advisory Type Requirement Change Policy/Program...

April 11, 2016
HAA 2016-004: HITRUST CSF Assurance Program Change Related To The Addition Of A Required Control For Certification In HITRUST CSF V8.
Impacted Policy/Program Name CSF Assurance Program Requirements Date January 12, 2016 Advisory Type Requirement Change Policy/Program Change Details This change adds CSF control...

May 11, 2016
HAA 2016-005: New Controls For HITRUST CSF V8
Impacted Policy/Program Name CSF Assurance Program Requirements Date August 3, 2016 Advisory Type Requirement Change Policy/Program Change Details This advisory reminds External Assessor Organizations...

June 11, 2016
HAA 2016-006: Certification To Require All CSF Controls Within 5 Years
Impacted Policy/Program Name CSF Assurance Program Requirements Date August 3, 2016 Advisory Type Requirement Change Policy/Program Change Details HITRUST policy has been to increase...

July 11, 2016
HAA 2016-007: Organizational Risk Factors Updated For CSF V8 Release
Impacted Policy/Program Name CSF Assurance Program Requirements Date August 3, 2016 Advisory Type Modification Policy/Program Change Details Organizational risk factors were revised as follows:...

August 11, 2016
HAA 2016-008: Deadline To Submit CSF V7-Based Assessments
Impacted Policy/Program Name CSF Assurance Program Requirements Date August 3, 2016 Advisory Type Clarification Policy/Program Change Details HITRUST will continue to accept and process...

September 11, 2016
HAA 2016-009: Intent Of Readiness Assessments
Impacted Policy/Program Name CSF Assurance Program Date August 3, 2016 Advisory Type Clarification Policy/Program Change Details HITRUST continues to recommend that “readiness assessments” be...

October 11, 2016
HAA 2016-010: Testing Protocols For Control Inheritance
Impacted Policy/Program Name CSF Assurance Program Requirements Date August 3, 2016 Advisory Type Guidance Policy/Program Change Details This advisory clarifies the treatment of controls...

November 11, 2016
HAA 2016-011: HITRUST Implements External Assessor Timesheet Functionality
Impacted Policy/Program Name CSF Assurance Program Requirements Date August 3, 2016 Advisory Type Guidance Policy/Program Change Details

December 11, 2016
HAA 2016-012: HITRUST Authorized External Assessor Access To MyCSF
Impacted Policy/Program Name External Assessor Access to MyCSF Date December 15, 2016 Advisory Type Policy Change Policy/Program Change Details This bulletin is to communicate...