Use this calculator to determine how many HITRUST CSF requirement statements will be in a HITRUST CSF assessment based on risks inherent to the assessed environment and/or preference to include one or more additional authoritative sources such as the HIPAA security rule.