HITRUST CSF certification

HITRUST CSF strategic planning and advising provides your organization access to our professionals who provide advice on your implementation plan and guide your organization with a reasonable path for adoption. This relationship includes assistance with strategic planning and education, executive presentations, budgeting, project management, road map development, internal readiness assessment advising, and access to outsource your organization’s in-house HITRUST CSF assessment process in accordance with the HITRUST Alliance’s internal assessor program.

A HITRUST CSF Rapid Assessment^® is designed to allow your organization, regardless of size, to quickly identify and remediate gaps. This assessment includes, at a high level, interviewing key stakeholders and reviewing select processes and artifacts. RSM’s Rapid Assessment assists in identifying fundamental gaps and provides you with realistic action plans and a high-level view of your organization’s alignment with the HITRUST CSF, which will allow your organization to prioritize remediation efforts.

A HITRUST CSF readiness assessment is the most efficient and effective way to prepare your organization for a validated assessment. By identifying gaps through a design-level assessment of policy, procedures and select artifacts that demonstrate the implementation of a requirement statement, you can focus your remediation efforts in the right areas. In addition, a readiness assessment will provide you with practical, detailed recommendations that will help your organization prioritize remediation efforts in order to conduct a successful HITRUST CSF-validated assessment.

Remediation support allows your organization to experience full access to the resources that RSM has to offer. As a cybersecurity consulting firm, RSM can assist with general remediation assistance, policy development, procedure development, cyber resiliency plan development, IT infrastructure consulting, risk consulting and management consulting.

A HITRUST CSF-validated assessment is the final phase required prior to submitting for certification consideration to the HITRUST Alliance. As an authorized external assessor firm, RSM will conduct the HITRUST CSF-validated assessment in accordance with the HITRUST Alliance’s assurance program requirements. If eligible, RSM will manage the HITRUST Alliances quality assurance process to help your organization achieve HITRUST CSF certification.

If your organization qualifies, RSM can also leverage your HITRUST r2 validated assessment to provide additional certifications, including NIST CSF and (SOC) 2.

A HITRUST CSF risk-based, two-year (r2) interim assessment is required before the end of your first year of HITRUST CSF r2 certification. This must be performed by a HITRUST authorized external assessor firm. If your organization is eligible, RSM will conduct the HITRUST CSF r2 interim assessment in accordance with the HITRUST Alliance’s assurance program requirements.

A HITRUST CSF implemented, 1-year (i1) rapid recertification assessment, if your organization is eligible, is an alternative way to quickly recertify your organization against a sample of selected requirement statements that were scored in the original certified HITRUST CSF i1 validated assessment object. It must be performed by a HITRUST authorized external assessor firm.