HITRUST is a US based company that, in collaboration with healthcare, technology and information security organizations, established the HITRUST Common Security Framework (CSF).  The framework is a comprehensive certifiable framework, that can be implemented by organizations who create, access, store or exchange sensitive and/or regulated data.

The purpose of this course is to define the requirements of HITRUST.  Participants learn more about key facts, components of the Common Security Framework (CSF) and methodologies for compliance. We  delve into the nineteen HITRUST components, as well as the corresponding business objectives and key control requirements.

This course helps participants understand best practices in effectively implementing a risk management program and improving cybersecurity practices by leveraging the HITRUST CSF.  We explore the HITRUST requirements and the corresponding processes organizations should implement to ensure compliance.  We discuss the benefits of implementing a single set of information security controls across the organization to allow for efficient and streamlined compliance with HITRUST. 

Course Key Concepts: HITRUST, CSF, Assurance, Compliance.