What to Look For in a Vendor HITRUST Certification Review

The HITRUST certification ensures that a healthcare organization has met the requirements outlines in the HITRUST Cybersecurity Framework (CSF). Why does this matter? When a vendor can meet the HITRUST framework controls and are certified, it means the vendor has a solid security posture and meets specific healthcare regulations such as HIPAA.

If a vendor (such as a business associate) has a HITRUST Certification, specifically the HITRUST r2 Certification, providing a copy of their full HITRUST report for your review may be accepted in lieu of the vendor completing an assessment questionnaire. This eBook covers what to look for in a vendor's HITRSUT certification. 

Download the eBook to learn:

• What to look for in a vendor's letter of certification
• Importance of obtaining the full report
• Why a HITRUST certification sets certain vendors ahead of the rest