Resources > Blog
Cybersecurity and Risk Management Blog
Read relevant topics that can inform and influence your organization’s risk management and compliance program.
Blog Posts
Oct 23, 2025
HITRUST: Now a Preferred Standard for Third-Party Risk in Financial Services HITRUST: Now a Preferred Standard for Third-Party Risk in Financial Services
Third-Party Risk Management,
Regulation,
Finance
Oct 14, 2025
Why You Can’t Afford to Ignore Vendor Risk Management in 2025 Why You Can’t Afford to Ignore Vendor Risk Management in 2025
Third-Party Risk Management,
Healthcare,
Ransomware
Oct 7, 2025
Understanding California’s SB 53 Law for AI Governance and Compliance Understanding California’s SB 53 Law for AI Governance and Compliance
AI,
Compliance,
Regulation
Oct 1, 2025
How HITRUST Helps Organizations Achieve CMMC Certification How HITRUST Helps Organizations Achieve CMMC Certification
Certifications,
HITRUST Framework (CSF),
Regulation
Sep 22, 2025
The Hidden Costs of HITRUST: How Poor Planning Impacts Timeline and Budget The Hidden Costs of HITRUST: How Poor Planning Impacts Timeline and Budget
Assessments,
Certifications
Sep 18, 2025
The Dark Passenger: Secure Your AI or Be the Next Headline The Dark Passenger: Secure Your AI or Be the Next Headline
AI,
Certifications,
Data Security
Sep 15, 2025
Introducing the HITRUST ROI Calculator Introducing the HITRUST ROI Calculator
Leadership,
Certifications,
Trust
Sep 11, 2025
Mitigating Island Hopping with Third-Party Risk Management Mitigating Island Hopping with Third-Party Risk Management
Data Breach,
Cybersecurity,
Third-Party Risk Management
Sep 2, 2025
Moving Beyond Checklists: Why Security Assurance Is the Future of Cybersecurity Moving Beyond Checklists: Why Security Assurance Is the Future of Cybersecurity
Assessments,
Cybersecurity,
HITRUST Assurance Program
Aug 28, 2025
CMS’s New Interoperability Framework Elevates Trust — and HITRUST Certification Is Key CMS’s New Interoperability Framework Elevates Trust — and HITRUST Certification Is Key
Certifications,
HIPAA,
Healthcare,
Regulation
Dec 17, 2024
Reforming the HIPAA Security Rule to Strengthen Cybersecurity Reforming the HIPAA Security Rule to Strengthen Cybersecurity
HIPAA,
Cybersecurity,
Healthcare
Aug 20, 2025
What Is Third-Party Risk Management? Understanding and Reducing Vendor-Related Cyber Risks What Is Third-Party Risk Management? Understanding and Reducing Vendor-Related Cyber Risks
Assessments,
Third-Party Risk Management
Aug 14, 2025
HITRUST vs. ISO vs. NIST Frameworks HITRUST vs. ISO vs. NIST Frameworks
HITRUST Framework (CSF),
NIST,
ISO
Aug 5, 2025
What Is a Cybersecurity Framework? Understanding the Foundation of Cyber Risk Management What Is a Cybersecurity Framework? Understanding the Foundation of Cyber Risk Management
Cybersecurity,
HITRUST Framework (CSF)
Jul 23, 2025
Managing Third-Party Vendor Risk in Financial Technology Managing Third-Party Vendor Risk in Financial Technology
Third-Party Risk Management,
Finance
Jul 17, 2025
Is SOC 2 Enough? The Need to Rethink Third-Party Risk Management and Assurance Is SOC 2 Enough? The Need to Rethink Third-Party Risk Management and Assurance
Assessments,
SOC 2,
Third-Party Risk Management
Jul 8, 2025
Texas Safe Harbor Law: Strengthen Cybersecurity and Reduce Liability Texas Safe Harbor Law: Strengthen Cybersecurity and Reduce Liability
Certifications,
Data Breach,
Regulation
Jul 2, 2025
The Role of Certification and Compliance in Cybersecurity The Role of Certification and Compliance in Cybersecurity
Certifications,
Cybersecurity,
Compliance
Jun 25, 2025
The Trust Tug-of-War in Third-Party Risk Management (TPRM) The Trust Tug-of-War in Third-Party Risk Management (TPRM)
Third-Party Risk Management,
Trust
Jun 19, 2025
The Future of Third-Party Risk Management in the Financial Sector The Future of Third-Party Risk Management in the Financial Sector
Third-Party Risk Management,
Finance
Jun 10, 2025
Is HITRUST worth it? ESG Analyzes the Value of HITRUST Certification Is HITRUST worth it? ESG Analyzes the Value of HITRUST Certification
Leadership,
Certifications,
Trust
Jun 5, 2025
AI Security Risks: The Biggest Threats Organizations Face Today AI Security Risks: The Biggest Threats Organizations Face Today
Risk Management,
AI,
Security
May 28, 2025
Too Many Stakeholders, Too Little Progress: Undermining Effective TPRM Too Many Stakeholders, Too Little Progress: Undermining Effective TPRM
Leadership,
Third-Party Risk Management
May 21, 2025
HITRUST vs. HIPAA: Comparing Key Differences HITRUST vs. HIPAA: Comparing Key Differences
HIPAA,
Healthcare,
Compliance
May 15, 2025
Beyond Compliance: The Critical Need for Healthcare Security Certification Beyond Compliance: The Critical Need for Healthcare Security Certification
Certifications,
Third-Party Risk Management,
Healthcare
May 7, 2025
Cybersecurity Best Practices in the Financial Sector: Protecting Data and Mitigating Risk Cybersecurity Best Practices in the Financial Sector: Protecting Data and Mitigating Risk
Data Security,
Cybersecurity,
Finance
Apr 30, 2025
Debunking Myths: What is HITRUST — And What It Isn’t Debunking Myths: What is HITRUST — And What It Isn’t
Certifications,
HITRUST Framework (CSF),
HITRUST Assurance Program
Apr 23, 2025
Do Healthcare TPRM Programs Have a Defined “Gold Standard” for Security? Do Healthcare TPRM Programs Have a Defined “Gold Standard” for Security?
Assessments,
Third-Party Risk Management,
Healthcare
Apr 15, 2025
Transforming Compliance and Driving Business Growth with HITRUST Transforming Compliance and Driving Business Growth with HITRUST
Certifications,
Cybersecurity,
Compliance
Jul 31, 2025
Cyber Threats are Moving Fast. Is Your Organization Prepared? Cyber Threats are Moving Fast. Is Your Organization Prepared?
Threat Management,
HITRUST Framework (CSF),
Threat Adaptive
Apr 3, 2025
How the HITRUST Trust Report Enhances Cyber Assurance and Risk Mitigation How the HITRUST Trust Report Enhances Cyber Assurance and Risk Mitigation
Assessments,
Leadership,
Trust
Mar 26, 2025
Introduction to Third-Party Vendor Risk Management Introduction to Third-Party Vendor Risk Management
Assessments,
Third-Party Risk Management,
Compliance
Mar 18, 2025
Why Your Third-Party Risk Management Solutions Might Be Incomplete Why Your Third-Party Risk Management Solutions Might Be Incomplete
Assessments,
Third-Party Risk Management
Mar 12, 2025
HITRUST — The Cornerstone of a Multi-Framework Compliance Approach HITRUST — The Cornerstone of a Multi-Framework Compliance Approach
HITRUST Framework (CSF),
Compliance,
Reciprocity
Mar 5, 2025
Cyber Insurance — A Cornerstone of Organizations' Risk Management Strategies Cyber Insurance — A Cornerstone of Organizations' Risk Management Strategies
Risk Management,
Cyber Insurance
Feb 26, 2025
The Reality of TPRM Remediation: A Symptom of a Broken System The Reality of TPRM Remediation: A Symptom of a Broken System
Assessments,
Third-Party Risk Management
Feb 20, 2025
Key Takeaways from the 2025 HITRUST Trust Report Key Takeaways from the 2025 HITRUST Trust Report
Leadership,
HITRUST Assurance Program,
Trust
Feb 11, 2025
Vendor Risk Assessments: Addressing Blind Spots in a Complex Landscape Vendor Risk Assessments: Addressing Blind Spots in a Complex Landscape
Assessments,
Data Security,
Third-Party Risk Management
Feb 3, 2025
Understanding the EU’s DORA Regulation for Businesses Understanding the EU’s DORA Regulation for Businesses
Compliance,
Regulation,
GDPR
Jan 29, 2025
HITRUST AI Risk Management and AI Security Certification: What’s the Difference? HITRUST AI Risk Management and AI Security Certification: What’s the Difference?
Assessments,
AI,
HITRUST Assurance Program
Jan 14, 2025
From Overwhelmed to Streamlined: Simplifying Healthcare TPRM From Overwhelmed to Streamlined: Simplifying Healthcare TPRM
Data Security,
Third-Party Risk Management,
Healthcare
Jan 13, 2025
HITRUST Issues a Statement on the 2024 HIPAA NPRM HITRUST Issues a Statement on the 2024 HIPAA NPRM
Leadership,
HIPAA,
Healthcare
Jan 7, 2025
Why Due Diligence Questionnaires Are Essential, but Security Questionnaires Need a Rethink Why Due Diligence Questionnaires Are Essential, but Security Questionnaires Need a Rethink
Risk Management,
Assessments,
Third-Party Risk Management
Dec 30, 2024
Organizations Achieve TPRM Success with HITRUST Certification Organizations Achieve TPRM Success with HITRUST Certification
Results Distribution System,
Third-Party Risk Management,
HITRUST Assurance Program
Dec 10, 2024
The Broken State: Time for a Revolution in Third-Party Risk Management The Broken State: Time for a Revolution in Third-Party Risk Management
Risk Management,
SOC 2,
Third-Party Risk Management
Dec 6, 2024
HITRUST Announces the Release of Version 11.4 of the HITRUST Framework HITRUST Announces the Release of Version 11.4 of the HITRUST Framework
Assessments,
Certifications,
MyCSF,
Cybersecurity,
HITRUST Framework (CSF)
Dec 4, 2024
How to Build a Skilled Cybersecurity Workforce for Tomorrow How to Build a Skilled Cybersecurity Workforce for Tomorrow
Leadership,
Cybersecurity
Nov 20, 2024
Building Trust in AI: Introducing the HITRUST AI Security Assessment and Certification Building Trust in AI: Introducing the HITRUST AI Security Assessment and Certification
AI,
HITRUST Assurance Program,
Trust,
Security
Nov 13, 2024
How HITRUST Assessments are Adapting to Cyber Threats in 2024 How HITRUST Assessments are Adapting to Cyber Threats in 2024
Assessments,
Threat Management,
Threat Adaptive
Nov 5, 2024
Q3 2024 Threat-Adaptive Evaluation for HITRUST i1 and r2 Assessments Q3 2024 Threat-Adaptive Evaluation for HITRUST i1 and r2 Assessments
Assessments,
Threat Management,
Threat Adaptive
Oct 31, 2024
Why Security is More Important than Stability in Business Why Security is More Important than Stability in Business
Cybersecurity,
Trust,
Security
Oct 22, 2024
How HITRUST e1 Controls Overlap with SOC 2 How HITRUST e1 Controls Overlap with SOC 2
Assessments,
SOC 2,
Compliance
Oct 15, 2024
Understanding AI Threats: Prompt Injection Attacks Understanding AI Threats: Prompt Injection Attacks
Shared Responsibility and Inheritance,
AI,
Threat Management
Oct 9, 2024
Key Takeaways from HITRUST Collaborate 2024 on Cybersecurity and Compliance Key Takeaways from HITRUST Collaborate 2024 on Cybersecurity and Compliance
HITRUST Collaborate,
AI,
Cybersecurity,
Third-Party Risk Management
Sep 24, 2024
Holistic Cybersecurity: Strengthening Physical, Digital, and Human Security Holistic Cybersecurity: Strengthening Physical, Digital, and Human Security
AI,
Data Security,
Cybersecurity
Sep 12, 2024
3 Pillars of AI Security: Protecting the Future of Technology 3 Pillars of AI Security: Protecting the Future of Technology
Risk Management,
AI,
Security
Sep 3, 2024
6 Essential Steps to Develop a Cybersecurity Strategy 6 Essential Steps to Develop a Cybersecurity Strategy
Data Security,
Cybersecurity
Aug 26, 2024
Q2 2024 Threat-Adaptive Evaluation for the HITRUST i1 Assessment Q2 2024 Threat-Adaptive Evaluation for the HITRUST i1 Assessment
Assessments,
Threat Management,
Threat Adaptive
Aug 21, 2024
Introducing the HITRUST AI Risk Management Assessment Introducing the HITRUST AI Risk Management Assessment
Risk Management,
Assessments,
AI
Aug 14, 2024
The Ransomware Threat: Why It Matters and How to Prepare The Ransomware Threat: Why It Matters and How to Prepare
Risk Management,
Threat Management,
Ransomware
Aug 7, 2024
How to Streamline the Process of Obtaining Cyber Insurance How to Streamline the Process of Obtaining Cyber Insurance
Data Security,
Cyber Insurance
Aug 1, 2024
Understanding the Differences Between HITRUST e1 and SOC 2 Understanding the Differences Between HITRUST e1 and SOC 2
Assessments,
SOC 2,
Compliance
Jul 17, 2024
5 Essential Steps to Implement AI the Right Way 5 Essential Steps to Implement AI the Right Way
Risk Management,
AI,
Security
Jul 9, 2024
Top 5 Reasons to Pursue HITRUST e1 Certification alongside or after Achieving SOC 2 Top 5 Reasons to Pursue HITRUST e1 Certification alongside or after Achieving SOC 2
Certifications,
SOC 2,
Compliance
Jul 26, 2024
Enhancing Cybersecurity and Compliance with HITRUST Certification alongside SOC 2 Enhancing Cybersecurity and Compliance with HITRUST Certification alongside SOC 2
Certifications,
SOC 2,
Compliance
Jun 26, 2024
Evaluate Vendor Risks Before It’s Too Late Evaluate Vendor Risks Before It’s Too Late
Risk Management,
Third-Party Risk Management,
Threat Adaptive
Jun 18, 2024
What Makes the HITRUST Framework Unique What Makes the HITRUST Framework Unique
Threat Management,
HITRUST Framework (CSF),
Threat Adaptive
Jun 11, 2024
HITRUST Letter to U.S. Congress, Regulators on Recent Ransomware Attacks HITRUST Letter to U.S. Congress, Regulators on Recent Ransomware Attacks
Data Breach,
Compliance,
Regulation,
Ransomware
Jun 4, 2024
Introducing the HITRUST Products & Services Directory Introducing the HITRUST Products & Services Directory
HIPAA,
HITRUST Framework (CSF),
NIST,
Compliance,
ISO,
GDPR,
Security
May 29, 2024
Managing Changes to Your HITRUST Certified Environment Managing Changes to Your HITRUST Certified Environment
Assessments,
Certifications
May 23, 2024
Rebuilding Trust in Healthcare Security with HITRUST Rebuilding Trust in Healthcare Security with HITRUST
Cybersecurity,
Healthcare,
Trust
May 16, 2024
Cyber Insurance and HITRUST: A Win-Win for Buyers and Providers Cyber Insurance and HITRUST: A Win-Win for Buyers and Providers
Risk Management,
Cyber Insurance
May 9, 2024
The Future of Assurance: HITRUST’s Vision for AI and Beyond The Future of Assurance: HITRUST’s Vision for AI and Beyond
AI,
HITRUST Assurance Program,
Trust
May 2, 2024
How to Get the Most of Your MyCSF Subscription: Leveraging Automation How to Get the Most of Your MyCSF Subscription: Leveraging Automation
MyCSF,
HITRUST Assurance Program
Apr 24, 2024
HITRUST: A Commitment to High-Quality and Reliable Assurance HITRUST: A Commitment to High-Quality and Reliable Assurance
HITRUST Assurance Program,
Trust
Apr 16, 2024
5 Reasons Why You Should Trust HITRUST 5 Reasons Why You Should Trust HITRUST
Assessments,
HITRUST Assurance Program,
Trust
Apr 11, 2024
How to Get the Most of Your MyCSF Subscription: Reusing Past Work How to Get the Most of Your MyCSF Subscription: Reusing Past Work
MyCSF,
HITRUST Assurance Program
Apr 4, 2024
How to Get the Most of Your MyCSF Subscription: Internal Reporting How to Get the Most of Your MyCSF Subscription: Internal Reporting
MyCSF,
HITRUST Assurance Program
Mar 27, 2024
How Much Does HITRUST Cost? How Much Does HITRUST Cost?
Certifications,
HITRUST Framework (CSF),
HITRUST Assurance Program
Mar 13, 2024
HITRUST Companion Guide for NIST Cybersecurity Framework 2.0 HITRUST Companion Guide for NIST Cybersecurity Framework 2.0
Cybersecurity,
NIST,
Compliance
Feb 28, 2024
All You Need to Know About the HITRUST e1 All You Need to Know About the HITRUST e1
Assessments,
Certifications,
HITRUST Assurance Program
Feb 19, 2024
Using the HITRUST Framework to Manage and Mitigate Third-Party Risks Using the HITRUST Framework to Manage and Mitigate Third-Party Risks
HITRUST Framework (CSF),
Third-Party Risk Management,
HITRUST Assurance Program
Feb 7, 2024
Making the Move from SOC 2 to HITRUST Easier (and More Advantageous) Making the Move from SOC 2 to HITRUST Easier (and More Advantageous)
Assessments,
Certifications,
SOC 2,
Compliance
Feb 1, 2024
How HITRUST Makes AI Risk Management Efficient How HITRUST Makes AI Risk Management Efficient
Shared Responsibility and Inheritance,
Risk Management,
AI
Jan 22, 2024
HITRUST Leads Industry Collaboration for AI Risk Management and Assurance HITRUST Leads Industry Collaboration for AI Risk Management and Assurance
Risk Management,
Leadership,
AI
Dec 27, 2023
How Are You Approaching AI Risk Management for Your Organization? How Are You Approaching AI Risk Management for Your Organization?
Risk Management,
AI,
HITRUST Framework (CSF)
Dec 12, 2023
HITRUST to Offer Assurances for AI Risk Management HITRUST to Offer Assurances for AI Risk Management
Risk Management,
AI,
Cybersecurity
Dec 5, 2023
Generative AI: 4 Risks it Brings to Your Organization Generative AI: 4 Risks it Brings to Your Organization
Risk Management,
AI
Nov 28, 2023
Generative AI in Cybersecurity: What’s a CISO to do? Generative AI in Cybersecurity: What’s a CISO to do?
Risk Management,
Leadership,
AI,
Cybersecurity
Nov 21, 2023
Navigating the Security Risks of AI in Healthcare Navigating the Security Risks of AI in Healthcare
AI,
Data Security,
Healthcare
Nov 20, 2023
The Pros and Cons of AI in Healthcare The Pros and Cons of AI in Healthcare
Risk Management,
AI,
Healthcare
Nov 17, 2023
The Future of AI in Healthcare The Future of AI in Healthcare
AI,
Data Security,
Healthcare
Nov 15, 2023
Nov 13, 2023
Overview: AI in the Healthcare Industry Overview: AI in the Healthcare Industry
AI,
Data Security,
Healthcare
Nov 9, 2023
A Sneak Peek into the Future of AI in Cybersecurity A Sneak Peek into the Future of AI in Cybersecurity
AI,
Cybersecurity
Nov 6, 2023
5 Key Takeaways from HITRUST Collaborate 2023 5 Key Takeaways from HITRUST Collaborate 2023
HITRUST Collaborate,
HITRUST Assurance Program
Nov 2, 2023
NIST AI Risk Management Framework: Will It Impact Future HITRUST Assessments? – Guest Blog from Collaborate Sponsor, LBMC NIST AI Risk Management Framework: Will It Impact Future HITRUST Assessments? – Guest Blog from Collaborate Sponsor, LBMC
Risk Management,
AI,
Cybersecurity
Oct 30, 2023
HITRUST Contributes to Drive Cyber Regulatory Harmonization and Alignment HITRUST Contributes to Drive Cyber Regulatory Harmonization and Alignment
Cybersecurity,
Compliance,
Regulation
Oct 24, 2023
Generative AI: Promises and Challenges Generative AI: Promises and Challenges
AI,
HITRUST Assurance Program
Oct 3, 2023
How to Create an Effective Third-Party Risk Management Plan How to Create an Effective Third-Party Risk Management Plan
Risk Management,
Assessments,
Third-Party Risk Management
Sep 28, 2023
How the Cloud is Driving Meaningful Change in Healthcare and Compliance How the Cloud is Driving Meaningful Change in Healthcare and Compliance
Healthcare,
Cloud Security
Sep 25, 2023
SOC 2 vs. HITRUST: Navigating Distinct Paths to Compliance SOC 2 vs. HITRUST: Navigating Distinct Paths to Compliance
Assessments,
SOC 2,
Compliance
Sep 21, 2023
How Compliance Leads the Way to Earn Trust How Compliance Leads the Way to Earn Trust
Risk Management,
Cybersecurity,
Compliance
Sep 18, 2023
3 Things CISOs Should Know when Communicating with their Board of Directors 3 Things CISOs Should Know when Communicating with their Board of Directors
Risk Management,
Leadership,
Cybersecurity
Sep 6, 2023
Why is Perception Important in Security and Compliance? Why is Perception Important in Security and Compliance?
Cybersecurity,
Compliance
Aug 31, 2023
Security and Compliance for the Cloud Security and Compliance for the Cloud
Shared Responsibility and Inheritance,
Compliance,
Cloud Security
Aug 30, 2023
How to Mitigate and Manage a Data Breach How to Mitigate and Manage a Data Breach
Risk Management,
Data Breach,
Data Security
Jul 31, 2023
Implementation for Health3PT Recommended Practices Implementation for Health3PT Recommended Practices
Risk Management,
Third-Party Risk Management,
Healthcare,
HITRUST Assurance Program
Jun 22, 2023
3 Key Steps for Effective TPRM 3 Key Steps for Effective TPRM
Risk Management,
HITRUST Framework (CSF),
Third-Party Risk Management,
Healthcare
Mar 8, 2023
Risk Analysis, Control Selection and Assurance with the NIST Cybersecurity Framework Implementation Guide Risk Analysis, Control Selection and Assurance with the NIST Cybersecurity Framework Implementation Guide
Risk Management,
Cybersecurity,
NIST,
Compliance
Feb 20, 2023
Artificial Intelligence Powered HITRUST CSF Version 11 Release Artificial Intelligence Powered HITRUST CSF Version 11 Release
Risk Management,
AI,
HITRUST Framework (CSF)
Jan 24, 2023
Power of the Portfolio Power of the Portfolio
Certifications,
HITRUST Framework (CSF),
HITRUST Assurance Program
Oct 31, 2022
HITRUST: A Trusted TEFCA Resource for Secure Health Data Exchange HITRUST: A Trusted TEFCA Resource for Secure Health Data Exchange
TEFCA,
Certifications,
Cybersecurity,
Healthcare
Sep 2, 2022
TPRM is Broken: Healthcare’s Unsustainable Approach to Third-Party Vendor Risk Management TPRM is Broken: Healthcare’s Unsustainable Approach to Third-Party Vendor Risk Management
Risk Management,
Third-Party Risk Management,
Healthcare
Jul 21, 2022
New Calculators Add Transparency and Ease-of-Use to HITRUST Assessment Scoring, Inheritance Math, and Sampling New Calculators Add Transparency and Ease-of-Use to HITRUST Assessment Scoring, Inheritance Math, and Sampling
Shared Responsibility and Inheritance,
Assessments,
Certifications
Jun 14, 2022
A Guide to Examining the Return on Investment (ROI) for a HITRUST Certification A Guide to Examining the Return on Investment (ROI) for a HITRUST Certification
Assessments,
Certifications,
HITRUST Assurance Program
Jan 19, 2022
Shared Responsibility and Inheritance in the Cloud Help Demonstrate Security Postures Shared Responsibility and Inheritance in the Cloud Help Demonstrate Security Postures
Shared Responsibility and Inheritance,
Third-Party Risk Management,
Compliance
Jan 3, 2022
HITRUST Innovation Leads to Next Generation i1 Assessment that is Threat-adaptive and Maintains Cyber Relevance HITRUST Innovation Leads to Next Generation i1 Assessment that is Threat-adaptive and Maintains Cyber Relevance
Assessments,
Threat Management,
Threat Adaptive,
HITRUST Assurance Program
No results found
X