Your Pathway to HITRUST Engagement
HITRUST offers two distinct pathways for organizations to engage with the HITRUST CSF®: External Assessors and Readiness Licensees.
External Assessors perform validated HITRUST certifications, while Readiness Licensees guide organizations on their compliance journey. Choose the program that aligns with your expertise and goals, and join us in advancing trust and security across industries.
Fill out the form to access our HITRUST External Assessor Program Options
Which route is the fit for you?
Fill out the form to access our HITRUST External Assessor Program Options.
External Assessors- Validated Assessments: Authorized to conduct HITRUST-validated assessments, including e1, i1, r2, and AI Security assessments.
- Certification Expertise: Specialize in performing thorough evaluations to certify organizations against HITRUST standards, ensuring compliance and robust security practices.
- Remediation Support: Can assist clients with implementation and remediation efforts, provided proper disclosures are made during certification submissions.
- SOC 2 Reports: AICPA firms acting as External Assessors can issue SOC 2 reports that include compliance opinions for both the Trust Services Criteria and the HITRUST Framework.
- Readiness Assessments: Focus on conducting readiness assessments to prepare organizations for HITRUST certification, without performing validated assessments.
- Consulting Services: Provide consulting on implementing HITRUST controls and aligning processes with HITRUST methodologies.
- No Certification Authority: Not authorized to issue validated HITRUST certifications; instead, they prepare clients for certification by External Assessors.
- SOC 2 Support: AICPA firms in this program can issue SOC 2 reports related to the HITRUST Framework, subject to applicable fees.