CSF Ready Program

HITRUST is experiencing significant demand from healthcare organizations requiring assistance and guidance in selecting information security products for general adoption and the Common Security Framework (CSF). In response to this need, the CSF Ready Program has been established to develop criteria and provide consistency for how information security products and services are evaluated; thus, reducing the complexity and aiding in the procurement process for both large and small organizations faced with identifying and implementing security solutions.

Output from the program is centered on the creation of criteria focused to aid organizations in determining a product's capabilities, functionality, effectiveness and support of security practices, and aid in CSF compliance. The criteria developed will be the basis for which products or services are evaluated by independent entities to achieve CSF Ready status. The CSF Ready designation will enable organizations to more quickly assess that a product or service does what is expected of it and meets the requirements of the CSF.

Get Involved

The program is coordinated by a steering committee comprised of leaders from the security assurance and information security communities. HITRUST and these industry leaders are committed to providing the necessary guidance and resources to support healthcare organizations in making informed purchasing decisions. In addition, an advisory committee, consisting of security professionals representing healthcare organizations, has been established to provide guidance and interact with the other committees.

HITRUST is seeking additional individuals from the security assurance, information security and healthcare communities to participate in the steering and advisory committees as well as security control sub-committees. Committee participation is a one-year commitment, and it is expected that participants will spend approximately four hours per month on committee-related activities. Information security organizations must also be participants in the HITRUST Leadership Roundtable or the CSF Products and Services Guide to be eligible for membership in the steering committee or associated sub-committees.

If you are interested in participating in the CSF Ready Program, please complete the participation request form.

Learn more about the role of the CSF Ready Program.
Visit the CSF Ready Forum on HITRUST Central.

Steering Committee

The CSF Ready Steering Committee includes leaders from the security assurance and information security communities.

HITRUST Central

A Professional subscription provides access to the online, interactive CSF , the CSF Assurance Toolkit, and many other resources developed specifically for healthcare information security professionals.

News Events