HITRUST Qualified Resources

HITRUST has defined two types of Qualified Resources with the knowledge, training and expertise needed to effectively support an organization's CSF implementation and related activities. These Qualified Resources must meet rigorous requirements before they can be approved by HITRUST to provide CSF related services, including readiness assessments, remediation measures, and certifications.

Qualified CSF Consultants

Qualified Consultants are approved by HITRUST to perform readiness assessments and remediation work associated with the implementation of the CSF.

Qualified CSF Certifiers

Qualified Certifiers are approved by HITRUST to perform certification work in addition to readiness assessments and remediation activities.

HITRUST Central

A Professional subscription provides access to the online, interactive CSF , the CSF Assurance Toolkit, and many other resources developed specifically for healthcare information security professionals.

CSF Assurance Program

Learn how the program simplifies compliance assessment and reporting through a common set of information security requirements.