HITRUST has established the Common Security Framework (CSF),
a certifiable framework that can be used by any and all organizations that create, access, store or exchange personal health and financial information.


Utilizing a common set of information security requirements, the program delivers simplified compliance assessment and reporting for HIPAA, HITECH, state, and business associate requirements.

Learn more about CSF Assurance
Learn more about CSF Assessors

The HITRUST CSF is available by subscribing to HITRUST Central, the online community for healthcare information security professionals. Individuals can register for one of two annual subscription options - Standard and Professional.

Learn more about HITRUST Central
Purchase a Professional subscription

License the Common Health Information Protection (CHIP) Questionnaire for performing a self assessment and to receive a CSF Validated report that can be used to report the state of your security to internal and external parties.

Learn more about self assessments
License the CHIP Questionnaire

News Events