Qualified CSF Consultants
Qualified CSF Consultants are those organizations that have been approved by HITRUST for performing readiness assessment and remediation work associated with the implementation of the CSF. These organizations are not permitted to audit an organization for the purpose of certification.
To become certified as a Qualified CSF Consultant, an organization must:
- Provide a letter from an authorized corporate representative to HITRUST committing the firm to support member organizations with qualified resources
- Have policies defined and procedures implemented to ensure the integrity and ethics of its employees
- Complete the Qualified CSF Resource Application
- Commit a minimum of 5 individuals* to support HITRUST services and become certified as HITRUST Practitioners
- Purchase annual subscription to HITRUST Central, which provides online access to the CSF
The high level requirements that individuals must meet in order to become HITRUST Practitioners are:
- Has and continues to maintain expertise in both the healthcare and information security industries
- Completes and passes the Certified Practitioner Training Course offered by HITRUST
- Maintains HITRUST and CSF expertise through participation in HITRUST committees
- Maintains a minimum of 120 CPE's over 3 years
Upon completion of the above requirements, HITRUST will provide a formal letter of acceptance and include the individual in the public listing of approved Qualified CSF Consultants. To learn more about becoming a consulting organization or to return completed materials to HITRUST, email certification@HITRUSTalliance.net.
*If this provision cannot be met due to constraints on the number of client servicing individuals focused on healthcare or information security, please contact HITRUST to discuss alternatives.
View a complete list of Consultant requirements in the HITRUST Certifier and Consultant Requirements
